forked from extern/shorewall_code
29 lines
1.1 KiB
Plaintext
29 lines
1.1 KiB
Plaintext
|
#
|
||
|
|
# Shorewall version 4.0 - Sample Rules File for one-interface configuration.
|
||
|
|
# Copyright (C) 2006 by the Shorewall Team
|
||
|
|
#
|
||
|
|
# This library is free software; you can redistribute it and/or
|
||
|
|
# modify it under the terms of the GNU Lesser General Public
|
||
|
|
# License as published by the Free Software Foundation; either
|
||
|
|
# version 2.1 of the License, or (at your option) any later version.
|
||
|
|
#
|
||
|
|
# See the file README.txt for further details.
|
||
|
|
#------------------------------------------------------------------------------------------------------------
|
||
|
|
# For information on entries in this file, type "man shorewall-rules"
|
||
|
|
#
|
||
|
|
# For more information, see http://www.shorewall.net/Documentation.htm#Zones
|
||
|
|
#
|
||
|
|
#############################################################################################################
|
||
|
|
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK
|
||
|
|
# PORT PORT(S) DEST LIMIT GROUP
|
||
|
|
|
||
|
|
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
|
||
|
|
|
||
|
|
Ping/DROP net $FW
|
||
|
|
|
||
|
|
# Permit all ICMP traffic FROM the firewall TO the net zone
|
||
|
|
|
||
|
|
ACCEPT $FW net ipv6-icmp
|
||
|
|
|
||
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|