mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-19 08:07:13 +02:00
macro.SMBBI: update macro header and description
Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
parent
316f07bce9
commit
f8d99a0f22
@ -1,36 +1,14 @@
|
|||||||
#
|
#
|
||||||
# Shorewall - SMB Bi-directional Macro
|
# Shorewall -- /usr/share/shorewall/macro.SMBBI
|
||||||
#
|
#
|
||||||
# /usr/share/shorewall/macro.SMBBI
|
# This macro (bidirectional) handles Microsoft SMB traffic.
|
||||||
#
|
#
|
||||||
# This macro (bidirectional) handles Microsoft SMB traffic.
|
# Beware! This macro opens a lot of ports, and could possibly be used
|
||||||
#
|
# to compromise your firewall if not used with care. You should only
|
||||||
# Beware! This macro opens a lot of ports, and could possibly be used
|
# allow SMB traffic between hosts you fully trust.
|
||||||
# to compromise your firewall if not used with care. You should only
|
|
||||||
# allow SMB traffic between hosts you fully trust.
|
|
||||||
#
|
#
|
||||||
###############################################################################
|
###############################################################################
|
||||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
|
||||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
|
||||||
PARAM - - udp 135,445
|
|
||||||
|
|
||||||
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )
|
SMB
|
||||||
PARAM - - udp 137 { helper=netbios-ns }
|
SMB DEST SOURCE
|
||||||
PARAM - - udp 138:139
|
|
||||||
?else
|
|
||||||
PARAM - - udp 137:139
|
|
||||||
?endif
|
|
||||||
|
|
||||||
PARAM - - udp 1024: 137
|
|
||||||
PARAM - - tcp 135,139,445
|
|
||||||
PARAM DEST SOURCE udp 135,445
|
|
||||||
|
|
||||||
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )
|
|
||||||
PARAM DEST SOURCE udp 137 { helper=netbios-ns }
|
|
||||||
PARAM DEST SOURCE udp 138:139
|
|
||||||
?else
|
|
||||||
PARAM DEST SOURCE udp 137:139
|
|
||||||
?endif
|
|
||||||
|
|
||||||
PARAM DEST SOURCE udp 1024: 137
|
|
||||||
PARAM DEST SOURCE tcp 135,139,445
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user