#
# Shorewall6 version 5 - Actions.std File
#
# /usr/share/shorewall6/actions.std
#
#	Please see http://shorewall.net/Actions.html for additional
#	information.
#
# Builtin Actions are:
#
?if 0
allowBcasts                     # Accept multicast and anycast packets
dropBcasts                      # Silently Drop multicast and anycast packets
dropNotSyn		        # Silently Drop Non-syn TCP packets
rejNotSyn		        # Silently Reject Non-syn TCP packets
?endif
###############################################################################
#ACTION
A_Drop	                        # Audited Default Action for DROP policy
A_Reject	                # Audited Default Action for REJECT policy
A_AllowICMPs	                # Audited Accept needed ICMP6 types
AllowICMPs   	                # Accept needed ICMP6 types
allowInvalid inline		# Accepts packets in the INVALID conntrack state
AutoBL       noinline           # Auto-blacklist IPs that exceed thesholds
AutoBLL      noinline           # Helper for AutoBL
Broadcast    noinline      	# Handles Broadcast/Multicast/Anycast
Drop		        	# Default Action for DROP policy
dropInvalid  inline		# Drops packets in the INVALID conntrack state
DropSmurfs   noinline     	# Handles packets with a broadcast source address
Established  inline,\		# Handles packets in the ESTABLISHED state
	     state=ESTABLISHED
IfEvent      noinline           # Perform an action based on an event
Invalid      inline,audit,\     # Handles packets in the INVALID conntrack state
             state=INVALID
New	     inline,state=NEW	# Handles packets in the NEW conntrack state
NotSyn	     inline 		# Handles TCP packets that do not have SYN=1 and ACK=0
Reject		        	# Default Action for REJECT policy
Related      inline,\		# Handles packets in the RELATED conntrack state
             state=RELATED
ResetEvent   inline		# Reset an Event
RST	     inline             # Handle packets with RST set
SetEvent     inline		# Initialize an event
TCPFlags    			# Handles bad flags combinations
Untracked    inline,\           # Handles packets in the UNTRACKED conntrack state
	     state=UNTRACKED