2006-02-04 21:57:38 +01:00
|
|
|
#
|
2007-07-09 16:01:07 +02:00
|
|
|
# Shorewall version 4 - SMB Bi-directional Macro
|
2006-02-04 21:57:38 +01:00
|
|
|
#
|
|
|
|
|
# /usr/share/shorewall/macro.SMBBI
|
|
|
|
|
#
|
2007-07-10 16:12:55 +02:00
|
|
|
# This macro (bidirectional) handles Microsoft SMB traffic.
|
2006-02-04 21:57:38 +01:00
|
|
|
#
|
|
|
|
|
# Beware! This macro opens a lot of ports, and could possibly be used
|
|
|
|
|
# to compromise your firewall if not used with care. You should only
|
|
|
|
|
# allow SMB traffic between hosts you fully trust.
|
|
|
|
|
#
|
|
|
|
|
###############################################################################
|
|
|
|
|
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
|
|
|
|
|
# PORT PORT(S) DEST LIMIT GROUP
|
|
|
|
|
PARAM - - udp 135,445
|
|
|
|
|
PARAM - - udp 137:139
|
|
|
|
|
PARAM - - udp 1024: 137
|
|
|
|
|
PARAM - - tcp 135,139,445
|
|
|
|
|
PARAM DEST SOURCE udp 135,445
|
|
|
|
|
PARAM DEST SOURCE udp 137:139
|
|
|
|
|
PARAM DEST SOURCE udp 1024: 137
|
|
|
|
|
PARAM DEST SOURCE tcp 135,139,445
|
|
|
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
