holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Tabification of new actions

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2017-03-13 11:19:35 -07:00
parent 24a014655b
commit 046998ed84
No known key found for this signature in database
GPG Key ID: 96E6B3F2423A4D10
8 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall/Actions/action.allowBcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
Broadcast(A_ACCEPT) Broadcast(A_ACCEPT)
?else ?else
?error "Invalid argument (@1) to allowBcast" ?error "Invalid argument (@1) to allowBcast"
?endif ?endif
?else ?else
Broadcast(ACCEPT) Broadcast(ACCEPT)

4
Shorewall/Actions/action.allowMcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
Multicast(A_ACCEPT) Multicast(A_ACCEPT)
?else ?else
?error "Invalid argument (@1) to allowMcast" ?error "Invalid argument (@1) to allowMcast"
?endif ?endif
?else ?else
Multicast(ACCEPT) Multicast(ACCEPT)

6
Shorewall/Actions/action.allowinUPnP
View File

@ -28,13 +28,13 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
A_ACCEPT - - 17 1900 A_ACCEPT - - 17 1900
A_ACCEPT - - 6 49152 A_ACCEPT - - 6 49152
?else ?else
?error "Invalid argument (@1) to allowinUPnP" ?error "Invalid argument (@1) to allowinUPnP"
?endif ?endif
?else ?else
ACCEPT - - 17 1900 ACCEPT - - 17 1900
ACCEPT - - 6 49152 ACCEPT - - 6 49152
?endif ?endif

4
Shorewall/Actions/action.dropBcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
Broadcast(A_DROP) Broadcast(A_DROP)
?else ?else
?error "Invalid argument (@1) to dropBcast" ?error "Invalid argument (@1) to dropBcast"
?endif ?endif
?else ?else
Broadcast(DROP) Broadcast(DROP)

4
Shorewall/Actions/action.dropMcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
Multicast(A_DROP) Multicast(A_DROP)
?else ?else
?error "Invalid argument (@1) to dropMcast" ?error "Invalid argument (@1) to dropMcast"
?endif ?endif
?else ?else
Multicast(DROP) Multicast(DROP)

4
Shorewall/Actions/action.dropNotSyn
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
A_DROP {proto=6:!syn} A_DROP {proto=6:!syn}
?else ?else
?error "Invalid argument (@1) to dropNotSyn" ?error "Invalid argument (@1) to dropNotSyn"
?endif ?endif
?else ?else
DROP {proto=6:!syn} DROP {proto=6:!syn}

4
Shorewall/Actions/action.rejNotSyn
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1) ?if passed(@1)
?if @1 eq 'audit' ?if @1 eq 'audit'
?require AUDIT_TARGET ?require AUDIT_TARGET
A_REJECT {proto=6:!syn} A_REJECT {proto=6:!syn}
?else ?else
?error "Invalid argument (@1) to rejNotSyn" ?error "Invalid argument (@1) to rejNotSyn"
?endif ?endif
?else ?else
REJECT(tcp-reset) {proto=6:!syn} REJECT(tcp-reset) {proto=6:!syn}

2
Shorewall/actions.std
View File

@ -12,7 +12,7 @@ A_Drop # Audited Default Action for DROP policy
A_REJECT noinline,logjump # Audits then rejects a connection request A_REJECT noinline,logjump # Audits then rejects a connection request
A_REJECT! inline # Audits then rejects a connection request A_REJECT! inline # Audits then rejects a connection request
A_Reject # Audited Default action for REJECT policy A_Reject # Audited Default action for REJECT policy
AllowICMPs inline # Allow Required ICMP packets AllowICMPs inline # Allow Required ICMP packets
allowBcast inline # Silently Allow Broadcast allowBcast inline # Silently Allow Broadcast
allowinUPnP inline # Allow UPnP inbound (to firewall) traffic allowinUPnP inline # Allow UPnP inbound (to firewall) traffic
allowInvalid inline # Accepts packets in the INVALID conntrack state allowInvalid inline # Accepts packets in the INVALID conntrack state