Rename audited actions and Macros

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-05-24 11:31:42 -07:00
parent 84b844ae79
commit 0beb327f0a
12 changed files with 26 additions and 26 deletions

View File

@ -1,9 +1,9 @@
#
# Shorewall version 4 - Drop Action
#
# /usr/share/shorewall/action.Drop
# /usr/share/shorewall/action.A_Drop
#
# The default DROP common rules
# The audited default DROP common rules
#
# This action is invoked before a DROP policy is enforced. The purpose
# of the action is:
@ -34,7 +34,7 @@ dropBcast(audit)
#
# ACCEPT critical ICMP types
#
AAllowICMPs - - icmp
A_AllowICMPs - - icmp
#
# Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log.
@ -44,7 +44,7 @@ dropInvalid(audit)
# Drop Microsoft noise so that it doesn't clutter up the log.
#
SMB(A_DROP)
ADropUPnP
A_DropUPnP
#
# Drop 'newnotsyn' traffic so that it doesn't get logged.
#
@ -53,4 +53,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log.
#
ADropDNSrep
A_DropDNSrep

View File

@ -1,9 +1,9 @@
#
# Shorewall version 4 - Reject Action
#
# /usr/share/shorewall/action.Reject
# /usr/share/shorewall/action.A_Reject
#
# The default REJECT action common rules
# The audited default REJECT action common rules
#
# This action is invoked before a REJECT policy is enforced. The purpose
# of the action is:
@ -31,7 +31,7 @@ dropBcast(audit)
#
# ACCEPT critical ICMP types
#
AAllowICMPs - - icmp
A_AllowICMPs - - icmp
#
# Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be
@ -42,7 +42,7 @@ dropInvalid(audit)
# Reject Microsoft noise so that it doesn't clutter up the log.
#
SMB(A_REJECT)
ADropUPnP
A_DropUPnP
#
# Drop 'newnotsyn' traffic so that it doesn't get logged.
#
@ -51,4 +51,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log.
#
ADropDNSrep
A_DropDNSrep

View File

@ -33,7 +33,7 @@
#
###############################################################################
#ACTION
ADrop # Audited Default Action for DROP policy
AReject # Audited Default action for REJECT policy
A_Drop # Audited Default Action for DROP policy
A_Reject # Audited Default action for REJECT policy
Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy

View File

@ -84,9 +84,9 @@ fi
%attr(0644,root,root) /usr/share/shorewall/version
%attr(0644,root,root) /usr/share/shorewall/actions.std
%attr(0644,root,root) /usr/share/shorewall/action.Drop
%attr(0644,root,root) /usr/share/shorewall/action.ADrop
%attr(0644,root,root) /usr/share/shorewall/action.A_Drop
%attr(0644,root,root) /usr/share/shorewall/action.Reject
%attr(0644,root,root) /usr/share/shorewall/action.AReject
%attr(0644,root,root) /usr/share/shorewall/action.A_Reject
%attr(0644,root,root) /usr/share/shorewall/action.template
%attr(- ,root,root) /usr/share/shorewall/functions
%attr(0644,root,root) /usr/share/shorewall/lib.base

View File

@ -1,7 +1,7 @@
#
# Shorewall6 version 4 - Audited AllowICMPs Action
#
# /usr/share/shorewall6/action.AAllowICMPs
# /usr/share/shorewall6/action.A_AllowICMPs
#
# This action A_ACCEPTs needed ICMP types
#

View File

@ -26,7 +26,7 @@ Auth(A_REJECT)
#
# ACCEPT critical ICMP types
#
AAllowICMPs - - ipv6-icmp
A_AllowICMPs - - ipv6-icmp
#
# Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected).
@ -49,4 +49,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log.
#
ADropDNSrep
A_DropDNSrep

View File

@ -1,7 +1,7 @@
#
# Shorewall6 version 4 - Audited Reject Action
#
# /usr/share/shorewall6/action.AReject
# /usr/share/shorewall6/action.A_Reject
#
# The audited default REJECT action common rules
#
@ -23,7 +23,7 @@ Auth(A_REJECT)
# Drop Multicasts so they don't clutter up the log
# (broadcasts must *not* be rejected).
#
AAllowICMPs - - ipv6-icmp
A_AllowICMPs - - ipv6-icmp
#
# Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected).
@ -47,4 +47,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log.
#
ADropDNSrep
A_DropDNSrep

View File

@ -19,9 +19,9 @@
#
###############################################################################
#ACTION
ADrop # Audited Default Action for DROP policy
AReject # Audited Default Action for REJECT policy
AAllowICMPs # Audited Accept needed ICMP6 types
A_Drop # Audited Default Action for DROP policy
A_Reject # Audited Default Action for REJECT policy
A_AllowICMPs # Audited Accept needed ICMP6 types
AllowICMPs # Accept needed ICMP6 types
Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy

View File

@ -77,11 +77,11 @@ fi
%attr(0644,root,root) /usr/share/shorewall6/version
%attr(0644,root,root) /usr/share/shorewall6/actions.std
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.AAllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.A_AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.Drop
%attr(0644,root,root) /usr/share/shorewall6/action.ADrop
%attr(0644,root,root) /usr/share/shorewall6/action.A_Drop
%attr(0644,root,root) /usr/share/shorewall6/action.Reject
%attr(0644,root,root) /usr/share/shorewall6/action.AReject
%attr(0644,root,root) /usr/share/shorewall6/action.A_Reject
%attr(0644,root,root) /usr/share/shorewall6/action.template
%attr(- ,root,root) /usr/share/shorewall6/functions
%attr(0644,root,root) /usr/share/shorewall6/lib.base