shorewall_code/Shorewall-common/macro.BitTorrent

#
# Shorewall version 4 - BitTorrent Macro
#
# /usr/share/shorewall/macro.BitTorrent
#
#	This macro handles BitTorrent traffic.
#
#	If you are running a more modern BitTorrent client, then you may need
#	to tweak the open port range.  This can be done by copying the below
#	rules into /etc/shorewall/rules and making the necessary edits there.
#
###############################################################################
#ACTION	SOURCE	DEST	PROTO	DEST	SOURCE	RATE	USER/
#				PORT(S)	PORT(S)	LIMIT	GROUP
PARAM	-	-	tcp	6881:6889
#
# It may also be necessary to allow UDP traffic:
#
PARAM	-	-	udp	6881
#
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
Adding extra actions provided by Debian package Do not use yet - these need cleaning git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2394 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-07-23 01:04:36 +02:00			`#`
Update versions in all files git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2007-07-09 16:01:07 +02:00			`# Shorewall version 4 - BitTorrent Macro`
Large cleanup patch from Tuomo Soini git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-08-02 18:46:30 +02:00			`#`
			`# /usr/share/shorewall/macro.BitTorrent`
Adding extra actions provided by Debian package Do not use yet - these need cleaning git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2394 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-07-23 01:04:36 +02:00			`#`
Large merge of function from EXPERIMENTAL to HEAD. 1) Elimination of the "shorewall monitor" command. 2) The /etc/shorewall/ipsec and /etc/shorewall/zones file are combined into a single /etc/shorewall/zones file. This is done in an upwardly-compatible way so that current users can continue to use their existing files. 3) Support has been added for the arp_ignore interface option. 4) DROPINVALID has been removed from shorewall.conf. Behavior is as if DROPINVALID=No was specified. 5) The 'nobogons' option and BOGON_LOG_LEVEL are removed. 6) Error and warning messages have been made easier to spot by using capitalization (e.g., ERROR: and WARNING:). 7) The /etc/shorewall/policy file now contains a new connection policy and a policy for ESTABLISHED packets. Useful for users of snort-inline who want to pass all packets to the QUEUE target. 8) A new 'critical' option has been added to /etc/shorewall/routestopped. Shorewall insures communication between the firewall and 'critical' hosts throughout start, restart, stop and clear. Useful for diskless firewall's with NFS-mounted file systems, LDAP servers, Crossbow, etc. 9) Macros. Macros are very similar to actions but are easier to use, allow parameter substitution and are more efficient. Almost all of the standard actions have been converted to macros in the EXPERIMENTAL branch. 10) The default value of ADD_IP_ALIASES in shorewall.conf is changed to No. 11) If you have 'make' installed on your firewall, then when you use the '-f' option to 'shorewall start' (as happens when you reboot), if your /etc/shorewall/ directory contains files that were modified after Shorewall was last restarted then Shorewall is started using the config files rather than using the saved configuration. git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2409 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-07-26 01:08:09 +02:00			`# This macro handles BitTorrent traffic.`
Adding extra actions provided by Debian package Do not use yet - these need cleaning git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2394 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-07-23 01:04:36 +02:00			`#`
Note about how to deal with varying port ranges for BitTorrent git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8499 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2008-05-18 05:00:54 +02:00			`# If you are running a more modern BitTorrent client, then you may need`
			`# to tweak the open port range. This can be done by copying the below`
			`# rules into /etc/shorewall/rules and making the necessary edits there.`
			`#`
Large cleanup patch from Tuomo Soini git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-08-02 18:46:30 +02:00			`###############################################################################`
Correct MACRO files (one more time) git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8144 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2008-02-03 21:34:19 +01:00			`#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/`
			`# PORT(S) PORT(S) LIMIT GROUP`
Large cleanup patch from Tuomo Soini git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-08-02 18:46:30 +02:00			`PARAM - - tcp 6881:6889`
Some updates to macros for clarity and consistency git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3365 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2006-01-24 00:55:01 +01:00			`#`
			`# It may also be necessary to allow UDP traffic:`
ipsecnat now implies ipsecnat:noah git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5249 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2007-01-18 00:41:59 +01:00			`#`
			`PARAM - - udp 6881`
Some updates to macros for clarity and consistency git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3365 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2006-01-24 00:55:01 +01:00			`#`
Adding extra actions provided by Debian package Do not use yet - these need cleaning git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2394 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb 2005-07-23 01:04:36 +02:00			`#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE`