forked from extern/shorewall_code
Rename audited actions and Macros
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
84b844ae79
commit
0beb327f0a
@ -1,9 +1,9 @@
|
||||
#
|
||||
# Shorewall version 4 - Drop Action
|
||||
#
|
||||
# /usr/share/shorewall/action.Drop
|
||||
# /usr/share/shorewall/action.A_Drop
|
||||
#
|
||||
# The default DROP common rules
|
||||
# The audited default DROP common rules
|
||||
#
|
||||
# This action is invoked before a DROP policy is enforced. The purpose
|
||||
# of the action is:
|
||||
@ -34,7 +34,7 @@ dropBcast(audit)
|
||||
#
|
||||
# ACCEPT critical ICMP types
|
||||
#
|
||||
AAllowICMPs - - icmp
|
||||
A_AllowICMPs - - icmp
|
||||
#
|
||||
# Drop packets that are in the INVALID state -- these are usually ICMP packets
|
||||
# and just confuse people when they appear in the log.
|
||||
@ -44,7 +44,7 @@ dropInvalid(audit)
|
||||
# Drop Microsoft noise so that it doesn't clutter up the log.
|
||||
#
|
||||
SMB(A_DROP)
|
||||
ADropUPnP
|
||||
A_DropUPnP
|
||||
#
|
||||
# Drop 'newnotsyn' traffic so that it doesn't get logged.
|
||||
#
|
||||
@ -53,4 +53,4 @@ dropNotSyn(audit) - - tcp
|
||||
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
|
||||
# the log.
|
||||
#
|
||||
ADropDNSrep
|
||||
A_DropDNSrep
|
@ -1,9 +1,9 @@
|
||||
#
|
||||
# Shorewall version 4 - Reject Action
|
||||
#
|
||||
# /usr/share/shorewall/action.Reject
|
||||
# /usr/share/shorewall/action.A_Reject
|
||||
#
|
||||
# The default REJECT action common rules
|
||||
# The audited default REJECT action common rules
|
||||
#
|
||||
# This action is invoked before a REJECT policy is enforced. The purpose
|
||||
# of the action is:
|
||||
@ -31,7 +31,7 @@ dropBcast(audit)
|
||||
#
|
||||
# ACCEPT critical ICMP types
|
||||
#
|
||||
AAllowICMPs - - icmp
|
||||
A_AllowICMPs - - icmp
|
||||
#
|
||||
# Drop packets that are in the INVALID state -- these are usually ICMP packets
|
||||
# and just confuse people when they appear in the log (these ICMPs cannot be
|
||||
@ -42,7 +42,7 @@ dropInvalid(audit)
|
||||
# Reject Microsoft noise so that it doesn't clutter up the log.
|
||||
#
|
||||
SMB(A_REJECT)
|
||||
ADropUPnP
|
||||
A_DropUPnP
|
||||
#
|
||||
# Drop 'newnotsyn' traffic so that it doesn't get logged.
|
||||
#
|
||||
@ -51,4 +51,4 @@ dropNotSyn(audit) - - tcp
|
||||
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
|
||||
# the log.
|
||||
#
|
||||
ADropDNSrep
|
||||
A_DropDNSrep
|
@ -33,7 +33,7 @@
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION
|
||||
ADrop # Audited Default Action for DROP policy
|
||||
AReject # Audited Default action for REJECT policy
|
||||
A_Drop # Audited Default Action for DROP policy
|
||||
A_Reject # Audited Default action for REJECT policy
|
||||
Drop # Default Action for DROP policy
|
||||
Reject # Default Action for REJECT policy
|
||||
|
@ -84,9 +84,9 @@ fi
|
||||
%attr(0644,root,root) /usr/share/shorewall/version
|
||||
%attr(0644,root,root) /usr/share/shorewall/actions.std
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.Drop
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.ADrop
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.A_Drop
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.Reject
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.AReject
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.A_Reject
|
||||
%attr(0644,root,root) /usr/share/shorewall/action.template
|
||||
%attr(- ,root,root) /usr/share/shorewall/functions
|
||||
%attr(0644,root,root) /usr/share/shorewall/lib.base
|
||||
|
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall6 version 4 - Audited AllowICMPs Action
|
||||
#
|
||||
# /usr/share/shorewall6/action.AAllowICMPs
|
||||
# /usr/share/shorewall6/action.A_AllowICMPs
|
||||
#
|
||||
# This action A_ACCEPTs needed ICMP types
|
||||
#
|
@ -26,7 +26,7 @@ Auth(A_REJECT)
|
||||
#
|
||||
# ACCEPT critical ICMP types
|
||||
#
|
||||
AAllowICMPs - - ipv6-icmp
|
||||
A_AllowICMPs - - ipv6-icmp
|
||||
#
|
||||
# Drop Broadcasts so they don't clutter up the log
|
||||
# (broadcasts must *not* be rejected).
|
||||
@ -49,4 +49,4 @@ dropNotSyn(audit) - - tcp
|
||||
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
|
||||
# the log.
|
||||
#
|
||||
ADropDNSrep
|
||||
A_DropDNSrep
|
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall6 version 4 - Audited Reject Action
|
||||
#
|
||||
# /usr/share/shorewall6/action.AReject
|
||||
# /usr/share/shorewall6/action.A_Reject
|
||||
#
|
||||
# The audited default REJECT action common rules
|
||||
#
|
||||
@ -23,7 +23,7 @@ Auth(A_REJECT)
|
||||
# Drop Multicasts so they don't clutter up the log
|
||||
# (broadcasts must *not* be rejected).
|
||||
#
|
||||
AAllowICMPs - - ipv6-icmp
|
||||
A_AllowICMPs - - ipv6-icmp
|
||||
#
|
||||
# Drop Broadcasts so they don't clutter up the log
|
||||
# (broadcasts must *not* be rejected).
|
||||
@ -47,4 +47,4 @@ dropNotSyn(audit) - - tcp
|
||||
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
|
||||
# the log.
|
||||
#
|
||||
ADropDNSrep
|
||||
A_DropDNSrep
|
@ -19,9 +19,9 @@
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION
|
||||
ADrop # Audited Default Action for DROP policy
|
||||
AReject # Audited Default Action for REJECT policy
|
||||
AAllowICMPs # Audited Accept needed ICMP6 types
|
||||
A_Drop # Audited Default Action for DROP policy
|
||||
A_Reject # Audited Default Action for REJECT policy
|
||||
A_AllowICMPs # Audited Accept needed ICMP6 types
|
||||
AllowICMPs # Accept needed ICMP6 types
|
||||
Drop # Default Action for DROP policy
|
||||
Reject # Default Action for REJECT policy
|
||||
|
@ -77,11 +77,11 @@ fi
|
||||
%attr(0644,root,root) /usr/share/shorewall6/version
|
||||
%attr(0644,root,root) /usr/share/shorewall6/actions.std
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.AAllowICMPs
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.A_AllowICMPs
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.Drop
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.ADrop
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.A_Drop
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.Reject
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.AReject
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.A_Reject
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.template
|
||||
%attr(- ,root,root) /usr/share/shorewall6/functions
|
||||
%attr(0644,root,root) /usr/share/shorewall6/lib.base
|
||||
|
Loading…
Reference in New Issue
Block a user