forked from extern/shorewall_code
Merge branch '5.2.8'
This commit is contained in:
commit
2ceeb2c934
12
Shorewall/Macros/macro.NFS
Normal file
12
Shorewall/Macros/macro.NFS
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
#
|
||||||
|
# Shorewall -- /usr/share/shorewall/macro.NFS
|
||||||
|
#
|
||||||
|
# This macro handles NFS v4.1+ traffic with default ports.
|
||||||
|
# You should only allow NFS traffic between hosts you fully trust.
|
||||||
|
#
|
||||||
|
###############################################################################
|
||||||
|
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
|
||||||
|
|
||||||
|
PARAM - - tcp 111 # portmapper, rpcbind
|
||||||
|
PARAM - - tcp 2049 # nfs
|
||||||
|
PARAM - - tcp 20048 # mountd
|
@ -279,7 +279,7 @@ sub generate_script_2() {
|
|||||||
#
|
#
|
||||||
# Conditionally emit the 'generate_all_acasts() function
|
# Conditionally emit the 'generate_all_acasts() function
|
||||||
#
|
#
|
||||||
my $call_generate_all_acasts = $family == F_IPV6 && ! have_capability( 'ADDRTYPE' ) && generate_all_acasts;
|
my $call_generate_all_acasts = $family == F_IPV6 && ! have_capability( 'ADDRTYPE' ) ? generate_all_acasts : '';
|
||||||
|
|
||||||
emit( '' ,
|
emit( '' ,
|
||||||
'#' ,
|
'#' ,
|
||||||
|
@ -75,7 +75,6 @@ our @EXPORT = ( qw( NOTHING
|
|||||||
all_interfaces
|
all_interfaces
|
||||||
all_real_interfaces
|
all_real_interfaces
|
||||||
all_plain_interfaces
|
all_plain_interfaces
|
||||||
interface_is_plain
|
|
||||||
all_bridges
|
all_bridges
|
||||||
managed_interfaces
|
managed_interfaces
|
||||||
unmanaged_interfaces
|
unmanaged_interfaces
|
||||||
|
@ -1 +1 @@
|
|||||||
5.2.8-RC1
|
5.2.8-base
|
||||||
|
Loading…
Reference in New Issue
Block a user