2011-10-03 03:41:58 +02:00
|
|
|
#
|
2016-04-05 19:13:55 +02:00
|
|
|
# Shorewall -- /usr/share/shorewall/action.TCPFlags
|
2011-10-03 03:41:58 +02:00
|
|
|
#
|
2016-04-05 19:13:55 +02:00
|
|
|
# Drop TCPFlags Action
|
2011-10-03 03:41:58 +02:00
|
|
|
#
|
2016-04-05 19:13:55 +02:00
|
|
|
# Accepts a single optional parameter:
|
2011-10-03 03:41:58 +02:00
|
|
|
#
|
2016-04-05 19:13:55 +02:00
|
|
|
# - = Do not Audit
|
|
|
|
|
# audit = Audit dropped packets.
|
2011-10-03 03:41:58 +02:00
|
|
|
#
|
2016-04-05 19:13:55 +02:00
|
|
|
###############################################################################
|
2011-10-03 03:41:58 +02:00
|
|
|
|
2016-03-13 00:09:31 +01:00
|
|
|
DEFAULTS -
|
|
|
|
|
|
2016-03-15 20:06:32 +01:00
|
|
|
?if passed(@1)
|
2016-03-13 02:01:52 +01:00
|
|
|
?if @1 eq 'audit'
|
2016-03-13 03:28:27 +01:00
|
|
|
?set tcpflags_action 'A_DROP'
|
2016-03-13 02:01:52 +01:00
|
|
|
?else
|
|
|
|
|
?error The parameter to TCPFlags must be 'audit' or '-'
|
|
|
|
|
?endif
|
|
|
|
|
?else
|
2016-03-13 03:28:27 +01:00
|
|
|
?set tcpflags_action 'DROP'
|
2016-03-13 02:01:52 +01:00
|
|
|
?endif
|
|
|
|
|
|
|
|
|
|
$tcpflags_action - - ;;+ -p 6 --tcp-flags ALL FIN,URG,PSH
|
|
|
|
|
$tcpflags_action - - ;;+ -p 6 --tcp-flags ALL NONE
|
|
|
|
|
$tcpflags_action - - ;;+ -p 6 --tcp-flags SYN,RST SYN,RST
|
|
|
|
|
$tcpflags_action - - ;;+ -p 6 --tcp-flags SYN,FIN SYN,FIN
|
|
|
|
|
$tcpflags_action - - ;;+ -p tcp --syn --sport 0
|
