extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-08-17 20:26:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

Audit: use new headers

Browse Source 
Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini
2016-02-14 22:13:55 +02:00
parent b4ca4b52fe
commit fcf435bc16
1 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
docs/Audit.xml
View File

@@ -139,9 +139,8 @@
<para>Example:</para> <para>Example:</para>
<programlisting>#SOURCE DEST POLICY LOG <programlisting>#SOURCE DEST POLICY
# LEVEL net $FW DROP:audit</programlisting>
net fw DROP:audit</programlisting>
<para>It is allowed to also specify a log level on audited policies <para>It is allowed to also specify a log level on audited policies
resulting in both auditing and logging.</para> resulting in both auditing and logging.</para>
@@ -170,8 +169,8 @@ net fw DROP:audit</programlisting>
<para>Example:</para> <para>Example:</para>
<programlisting>#ACTION SOURCE DEST PROTO <programlisting>#ACTION SOURCE DEST PROTO
A_ACCEPT:info loc net ...</programlisting> A_ACCEPT:info loc net ...</programlisting>
</listitem> </listitem>
<listitem> <listitem>
@@ -330,12 +329,12 @@ A_ACCEPT:info loc net ...</programlisting>
<para> The parameters can be passed in the POLICY column of the policy <para> The parameters can be passed in the POLICY column of the policy
file. </para> file. </para>
<programlisting>SOURCE DEST POLICY <programlisting>#SOURCE DEST POLICY
net all DROP:Drop(audit):audit #Same as DROP:A_DROP:audit net all DROP:Drop(audit):audit #Same as DROP:A_DROP:audit
</programlisting> </programlisting>
<programlisting>SOURCE DEST POLICY <programlisting>#SOURCE DEST POLICY
net all DROP:Drop(-,DROP) #DROP rather than REJECT Auth net all DROP:Drop(-,DROP) #DROP rather than REJECT Auth
</programlisting> </programlisting>
<para>The parameters can also be specified in shorewall.conf: </para> <para>The parameters can also be specified in shorewall.conf: </para>