# # Shorewall6 version 5 - Actions.std File # # /usr/share/shorewall6/actions.std # # Please see http://shorewall.net/Actions.html for additional # information. # # Builtin Actions are: # ?if 0 allowBcasts # Accept anycast packets allowMcasts # Accept multicast packets dropBcasts # Silently Drop anycast packets dropMcasts # Silently Drop multicast packets dropNotSyn # Silently Drop Non-syn TCP packets rejNotSyn # Silently Reject Non-syn TCP packets ?endif ############################################################################### #ACTION A_Drop # Audited Default Action for DROP policy A_Reject # Audited Default Action for REJECT policy A_AllowICMPs # Audited Accept needed ICMP6 types AllowICMPs # Accept needed ICMP6 types allowInvalid inline # Accepts packets in the INVALID conntrack state AutoBL noinline # Auto-blacklist IPs that exceed thesholds AutoBLL noinline # Helper for AutoBL Broadcast noinline # Handles Broadcast/Anycast Drop # Default Action for DROP policy (deprecated) dropInvalid inline # Drops packets in the INVALID conntrack state DropDNSrep inline # Drops DNS replies DropSmurfs noinline # Handles packets with a broadcast source address Established inline,\ # Handles packets in the ESTABLISHED state state=ESTABLISHED IfEvent noinline # Perform an action based on an event Invalid inline,audit,\ # Handles packets in the INVALID conntrack state state=INVALID Multicast noinline # Handles Multicast New inline,state=NEW # Handles packets in the NEW conntrack state NotSyn inline # Handles TCP packets that do not have SYN=1 and ACK=0 Reject # Default Action for REJECT policy (deprecated) Related inline,\ # Handles packets in the RELATED conntrack state state=RELATED ResetEvent inline # Reset an Event RST inline # Handle packets with RST set SetEvent inline # Initialize an event TCPFlags # Handles bad flags combinations Untracked inline,\ # Handles packets in the UNTRACKED conntrack state state=UNTRACKED