holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Tabification of new actions

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2017-03-13 11:19:35 -07:00
parent 24a014655b
commit 046998ed84
No known key found for this signature in database
GPG Key ID: 96E6B3F2423A4D10
8 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall/Actions/action.allowBcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
Broadcast(A_ACCEPT)
?else
?error "Invalid argument (@1) to allowBcast"
?error "Invalid argument (@1) to allowBcast"
?endif
?else
Broadcast(ACCEPT)

4
Shorewall/Actions/action.allowMcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
Multicast(A_ACCEPT)
?else
?error "Invalid argument (@1) to allowMcast"
?error "Invalid argument (@1) to allowMcast"
?endif
?else
Multicast(ACCEPT)

6
Shorewall/Actions/action.allowinUPnP
View File

@ -28,13 +28,13 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
A_ACCEPT - - 17 1900
A_ACCEPT - - 6 49152
?else
?error "Invalid argument (@1) to allowinUPnP"
?error "Invalid argument (@1) to allowinUPnP"
?endif
?else
ACCEPT - - 17 1900
ACCEPT - - 6 49152
ACCEPT - - 6 49152
?endif

4
Shorewall/Actions/action.dropBcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
Broadcast(A_DROP)
?else
?error "Invalid argument (@1) to dropBcast"
?error "Invalid argument (@1) to dropBcast"
?endif
?else
Broadcast(DROP)

4
Shorewall/Actions/action.dropMcast
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
Multicast(A_DROP)
?else
?error "Invalid argument (@1) to dropMcast"
?error "Invalid argument (@1) to dropMcast"
?endif
?else
Multicast(DROP)

4
Shorewall/Actions/action.dropNotSyn
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
A_DROP {proto=6:!syn}
?else
?error "Invalid argument (@1) to dropNotSyn"
?error "Invalid argument (@1) to dropNotSyn"
?endif
?else
DROP {proto=6:!syn}

4
Shorewall/Actions/action.rejNotSyn
View File

@ -28,10 +28,10 @@ DEFAULTS -
?if passed(@1)
?if @1 eq 'audit'
?require AUDIT_TARGET
?require AUDIT_TARGET
A_REJECT {proto=6:!syn}
?else
?error "Invalid argument (@1) to rejNotSyn"
?error "Invalid argument (@1) to rejNotSyn"
?endif
?else
REJECT(tcp-reset) {proto=6:!syn}

2
Shorewall/actions.std
View File

@ -12,7 +12,7 @@ A_Drop # Audited Default Action for DROP policy
A_REJECT noinline,logjump # Audits then rejects a connection request
A_REJECT! inline # Audits then rejects a connection request
A_Reject # Audited Default action for REJECT policy
AllowICMPs inline # Allow Required ICMP packets
AllowICMPs inline # Allow Required ICMP packets
allowBcast inline # Silently Allow Broadcast
allowinUPnP inline # Allow UPnP inbound (to firewall) traffic
allowInvalid inline # Accepts packets in the INVALID conntrack state