shorewall_code/Shorewall/Macros/macro.SMB
Tuomo Soini 316f07bce9 macro.SMB: update macro header and description
Signed-off-by: Tuomo Soini <tis@foobar.fi>
2016-02-15 18:20:39 +02:00

24 lines
711 B
Plaintext

#
# Shorewall -- /usr/share/shorewall/macro.SMB
#
# This macro handles Microsoft SMB traffic.
# You need to invoke this macro in both directions.
# Beware! This rule opens a lot of ports, and could possibly be used to
# compromise your firewall if not used with care. You should only allow SMB
# traffic between hosts you fully trust.
#
###############################################################################
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 135,445
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )
PARAM - - udp 137 { helper=netbios-ns }
PARAM - - udp 138:139
?else
PARAM - - udp 137:139
?endif
PARAM - - udp 1024: 137
PARAM - - tcp 135,139,445