holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Rename audited actions and Macros

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-05-24 11:31:42 -07:00
parent 84b844ae79
commit 0beb327f0a
12 changed files with 26 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
Shorewall/Macros/macro.AAllowICMPs → Shorewall/Macros/macro.A_AllowICMPs
View File

0
Shorewall/Macros/macro.ADropDNSrep → Shorewall/Macros/macro.A_DropDNSrep
View File

0
Shorewall/Macros/macro.ADropUPnP → Shorewall/Macros/macro.A_DropUPnP
View File

10
Shorewall/action.ADrop → Shorewall/action.A_Drop
View File

@ -1,9 +1,9 @@
# #
# Shorewall version 4 - Drop Action # Shorewall version 4 - Drop Action
# #
# /usr/share/shorewall/action.Drop # /usr/share/shorewall/action.A_Drop
# #
# The default DROP common rules # The audited default DROP common rules
# #
# This action is invoked before a DROP policy is enforced. The purpose # This action is invoked before a DROP policy is enforced. The purpose
# of the action is: # of the action is:
@ -34,7 +34,7 @@ dropBcast(audit)
# #
# ACCEPT critical ICMP types # ACCEPT critical ICMP types
# #
AAllowICMPs - - icmp A_AllowICMPs - - icmp
# #
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log. # and just confuse people when they appear in the log.
@ -44,7 +44,7 @@ dropInvalid(audit)
# Drop Microsoft noise so that it doesn't clutter up the log. # Drop Microsoft noise so that it doesn't clutter up the log.
# #
SMB(A_DROP) SMB(A_DROP)
ADropUPnP A_DropUPnP
# #
# Drop 'newnotsyn' traffic so that it doesn't get logged. # Drop 'newnotsyn' traffic so that it doesn't get logged.
# #
@ -53,4 +53,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up # Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log. # the log.
# #
ADropDNSrep A_DropDNSrep

10
Shorewall/action.AReject → Shorewall/action.A_Reject
View File

@ -1,9 +1,9 @@
# #
# Shorewall version 4 - Reject Action # Shorewall version 4 - Reject Action
# #
# /usr/share/shorewall/action.Reject # /usr/share/shorewall/action.A_Reject
# #
# The default REJECT action common rules # The audited default REJECT action common rules
# #
# This action is invoked before a REJECT policy is enforced. The purpose # This action is invoked before a REJECT policy is enforced. The purpose
# of the action is: # of the action is:
@ -31,7 +31,7 @@ dropBcast(audit)
# #
# ACCEPT critical ICMP types # ACCEPT critical ICMP types
# #
AAllowICMPs - - icmp A_AllowICMPs - - icmp
# #
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be
@ -42,7 +42,7 @@ dropInvalid(audit)
# Reject Microsoft noise so that it doesn't clutter up the log. # Reject Microsoft noise so that it doesn't clutter up the log.
# #
SMB(A_REJECT) SMB(A_REJECT)
ADropUPnP A_DropUPnP
# #
# Drop 'newnotsyn' traffic so that it doesn't get logged. # Drop 'newnotsyn' traffic so that it doesn't get logged.
# #
@ -51,4 +51,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up # Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log. # the log.
# #
ADropDNSrep A_DropDNSrep

4
Shorewall/actions.std
View File

@ -33,7 +33,7 @@
# #
############################################################################### ###############################################################################
#ACTION #ACTION
ADrop # Audited Default Action for DROP policy A_Drop # Audited Default Action for DROP policy
AReject # Audited Default action for REJECT policy A_Reject # Audited Default action for REJECT policy
Drop # Default Action for DROP policy Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy Reject # Default Action for REJECT policy

4
Shorewall/shorewall.spec
View File

@ -84,9 +84,9 @@ fi
%attr(0644,root,root) /usr/share/shorewall/version %attr(0644,root,root) /usr/share/shorewall/version
%attr(0644,root,root) /usr/share/shorewall/actions.std %attr(0644,root,root) /usr/share/shorewall/actions.std
%attr(0644,root,root) /usr/share/shorewall/action.Drop %attr(0644,root,root) /usr/share/shorewall/action.Drop
%attr(0644,root,root) /usr/share/shorewall/action.ADrop %attr(0644,root,root) /usr/share/shorewall/action.A_Drop
%attr(0644,root,root) /usr/share/shorewall/action.Reject %attr(0644,root,root) /usr/share/shorewall/action.Reject
%attr(0644,root,root) /usr/share/shorewall/action.AReject %attr(0644,root,root) /usr/share/shorewall/action.A_Reject
%attr(0644,root,root) /usr/share/shorewall/action.template %attr(0644,root,root) /usr/share/shorewall/action.template
%attr(- ,root,root) /usr/share/shorewall/functions %attr(- ,root,root) /usr/share/shorewall/functions
%attr(0644,root,root) /usr/share/shorewall/lib.base %attr(0644,root,root) /usr/share/shorewall/lib.base

2
Shorewall6/action.AAllowICMPs → Shorewall6/action.A_AllowICMPs
View File

@ -1,7 +1,7 @@
# #
# Shorewall6 version 4 - Audited AllowICMPs Action # Shorewall6 version 4 - Audited AllowICMPs Action
# #
# /usr/share/shorewall6/action.AAllowICMPs # /usr/share/shorewall6/action.A_AllowICMPs
# #
# This action A_ACCEPTs needed ICMP types # This action A_ACCEPTs needed ICMP types
# #

4
Shorewall6/action.ADrop → Shorewall6/action.A_Drop
View File

@ -26,7 +26,7 @@ Auth(A_REJECT)
# #
# ACCEPT critical ICMP types # ACCEPT critical ICMP types
# #
AAllowICMPs - - ipv6-icmp A_AllowICMPs - - ipv6-icmp
# #
# Drop Broadcasts so they don't clutter up the log # Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
@ -49,4 +49,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up # Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log. # the log.
# #
ADropDNSrep A_DropDNSrep

6
Shorewall6/action.AReject → Shorewall6/action.A_Reject
View File

@ -1,7 +1,7 @@
# #
# Shorewall6 version 4 - Audited Reject Action # Shorewall6 version 4 - Audited Reject Action
# #
# /usr/share/shorewall6/action.AReject # /usr/share/shorewall6/action.A_Reject
# #
# The audited default REJECT action common rules # The audited default REJECT action common rules
# #
@ -23,7 +23,7 @@ Auth(A_REJECT)
# Drop Multicasts so they don't clutter up the log # Drop Multicasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
# #
AAllowICMPs - - ipv6-icmp A_AllowICMPs - - ipv6-icmp
# #
# Drop Broadcasts so they don't clutter up the log # Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
@ -47,4 +47,4 @@ dropNotSyn(audit) - - tcp
# Drop late-arriving DNS replies. These are just a nuisance and clutter up # Drop late-arriving DNS replies. These are just a nuisance and clutter up
# the log. # the log.
# #
ADropDNSrep A_DropDNSrep

6
Shorewall6/actions.std
View File

@ -19,9 +19,9 @@
# #
############################################################################### ###############################################################################
#ACTION #ACTION
ADrop # Audited Default Action for DROP policy A_Drop # Audited Default Action for DROP policy
AReject # Audited Default Action for REJECT policy A_Reject # Audited Default Action for REJECT policy
AAllowICMPs # Audited Accept needed ICMP6 types A_AllowICMPs # Audited Accept needed ICMP6 types
AllowICMPs # Accept needed ICMP6 types AllowICMPs # Accept needed ICMP6 types
Drop # Default Action for DROP policy Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy Reject # Default Action for REJECT policy

6
Shorewall6/shorewall6.spec
View File

@ -77,11 +77,11 @@ fi
%attr(0644,root,root) /usr/share/shorewall6/version %attr(0644,root,root) /usr/share/shorewall6/version
%attr(0644,root,root) /usr/share/shorewall6/actions.std %attr(0644,root,root) /usr/share/shorewall6/actions.std
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs %attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.AAllowICMPs %attr(0644,root,root) /usr/share/shorewall6/action.A_AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.Drop %attr(0644,root,root) /usr/share/shorewall6/action.Drop
%attr(0644,root,root) /usr/share/shorewall6/action.ADrop %attr(0644,root,root) /usr/share/shorewall6/action.A_Drop
%attr(0644,root,root) /usr/share/shorewall6/action.Reject %attr(0644,root,root) /usr/share/shorewall6/action.Reject
%attr(0644,root,root) /usr/share/shorewall6/action.AReject %attr(0644,root,root) /usr/share/shorewall6/action.A_Reject
%attr(0644,root,root) /usr/share/shorewall6/action.template %attr(0644,root,root) /usr/share/shorewall6/action.template
%attr(- ,root,root) /usr/share/shorewall6/functions %attr(- ,root,root) /usr/share/shorewall6/functions
%attr(0644,root,root) /usr/share/shorewall6/lib.base %attr(0644,root,root) /usr/share/shorewall6/lib.base