forked from extern/shorewall_code
Update Shorewall6 default-action defaults
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep
parent
95ffada759
commit
3b82721956
15
Shorewall6/Samples6/Universal/params
Normal file
15
Shorewall6/Samples6/Universal/params
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#
|
||||||
|
# Shorewall - Sample Params File for universal configuration.
|
||||||
|
# Copyright (C) 2006-2017 by the Shorewall Team
|
||||||
|
#
|
||||||
|
# This library is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU Lesser General Public
|
||||||
|
# License as published by the Free Software Foundation; either
|
||||||
|
# version 2.1 of the License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# See the file README.txt for further details.
|
||||||
|
#------------------------------------------------------------------------------------------------------------
|
||||||
|
# For information on entries in this file, type "man shorewall-params"
|
||||||
|
######################################################################################################################################################################################################
|
||||||
|
|
||||||
|
LOG=info # Change this to change the way in which packets are logged.
|
||||||
@ -104,12 +104,12 @@ TC=
|
|||||||
# D E F A U L T A C T I O N S / M A C R O S
|
# D E F A U L T A C T I O N S / M A C R O S
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
ACCEPT_DEFAULT="none"
|
ACCEPT_DEFAULT=none
|
||||||
BLACKLIST_DEFAULT="Drop"
|
BLACKLIST_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
DROP_DEFAULT="Drop"
|
DROP_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
NFQUEUE_DEFAULT="none"
|
NFQUEUE_DEFAULT=none
|
||||||
QUEUE_DEFAULT="none"
|
QUEUE_DEFAULT=none
|
||||||
REJECT_DEFAULT="Reject"
|
REJECT_DEFAULT=AllowICMPs,dropBcasts
|
||||||
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# R S H / R C P C O M M A N D S
|
# R S H / R C P C O M M A N D S
|
||||||
|
|||||||
15
Shorewall6/Samples6/one-interface/params
Normal file
15
Shorewall6/Samples6/one-interface/params
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#
|
||||||
|
# Shorewall - Sample Params File for one-interface configuration.
|
||||||
|
# Copyright (C) 2006-2017 by the Shorewall Team
|
||||||
|
#
|
||||||
|
# This library is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU Lesser General Public
|
||||||
|
# License as published by the Free Software Foundation; either
|
||||||
|
# version 2.1 of the License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# See the file README.txt for further details.
|
||||||
|
#------------------------------------------------------------------------------------------------------------
|
||||||
|
# For information on entries in this file, type "man shorewall-params"
|
||||||
|
######################################################################################################################################################################################################
|
||||||
|
|
||||||
|
LOG=info # Change this to change the way in which packets are logged.
|
||||||
@ -105,12 +105,12 @@ TC=
|
|||||||
# D E F A U L T A C T I O N S / M A C R O S
|
# D E F A U L T A C T I O N S / M A C R O S
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
ACCEPT_DEFAULT="none"
|
ACCEPT_DEFAULT=none
|
||||||
BLACKLIST_DEFAULT="Drop"
|
BLACKLIST_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
DROP_DEFAULT="Drop"
|
DROP_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
NFQUEUE_DEFAULT="none"
|
NFQUEUE_DEFAULT=none
|
||||||
QUEUE_DEFAULT="none"
|
QUEUE_DEFAULT=none
|
||||||
REJECT_DEFAULT="Reject"
|
REJECT_DEFAULT=AllowICMPs,dropBcasts
|
||||||
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# R S H / R C P C O M M A N D S
|
# R S H / R C P C O M M A N D S
|
||||||
|
|||||||
15
Shorewall6/Samples6/three-interfaces/params
Normal file
15
Shorewall6/Samples6/three-interfaces/params
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#
|
||||||
|
# Shorewall - Sample Params File for three-interface configuration.
|
||||||
|
# Copyright (C) 2006-2017 by the Shorewall Team
|
||||||
|
#
|
||||||
|
# This library is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU Lesser General Public
|
||||||
|
# License as published by the Free Software Foundation; either
|
||||||
|
# version 2.1 of the License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# See the file README.txt for further details.
|
||||||
|
#------------------------------------------------------------------------------------------------------------
|
||||||
|
# For information on entries in this file, type "man shorewall-params"
|
||||||
|
######################################################################################################################################################################################################
|
||||||
|
|
||||||
|
LOG=info # Change this to change the way in which packets are logged.
|
||||||
@ -104,12 +104,12 @@ TC=
|
|||||||
# D E F A U L T A C T I O N S / M A C R O S
|
# D E F A U L T A C T I O N S / M A C R O S
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
ACCEPT_DEFAULT="none"
|
ACCEPT_DEFAULT=none
|
||||||
BLACKLIST_DEFAULT="Drop"
|
BLACKLIST_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
DROP_DEFAULT="Drop"
|
DROP_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
NFQUEUE_DEFAULT="none"
|
NFQUEUE_DEFAULT=none
|
||||||
QUEUE_DEFAULT="none"
|
QUEUE_DEFAULT=none
|
||||||
REJECT_DEFAULT="Reject"
|
REJECT_DEFAULT=AllowICMPs,dropBcasts
|
||||||
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# R S H / R C P C O M M A N D S
|
# R S H / R C P C O M M A N D S
|
||||||
|
|||||||
15
Shorewall6/Samples6/two-interfaces/params
Normal file
15
Shorewall6/Samples6/two-interfaces/params
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#
|
||||||
|
# Shorewall - Sample Params File for two-interface configuration.
|
||||||
|
# Copyright (C) 2006-2017 by the Shorewall Team
|
||||||
|
#
|
||||||
|
# This library is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU Lesser General Public
|
||||||
|
# License as published by the Free Software Foundation; either
|
||||||
|
# version 2.1 of the License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# See the file README.txt for further details.
|
||||||
|
#------------------------------------------------------------------------------------------------------------
|
||||||
|
# For information on entries in this file, type "man shorewall-params"
|
||||||
|
######################################################################################################################################################################################################
|
||||||
|
|
||||||
|
LOG=info # Change this to change the way in which packets are logged.
|
||||||
@ -104,12 +104,12 @@ TC=
|
|||||||
# D E F A U L T A C T I O N S / M A C R O S
|
# D E F A U L T A C T I O N S / M A C R O S
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
ACCEPT_DEFAULT="none"
|
ACCEPT_DEFAULT=none
|
||||||
BLACKLIST_DEFAULT="Drop"
|
BLACKLIST_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
DROP_DEFAULT="Drop"
|
DROP_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
NFQUEUE_DEFAULT="none"
|
NFQUEUE_DEFAULT=none
|
||||||
QUEUE_DEFAULT="none"
|
QUEUE_DEFAULT=none
|
||||||
REJECT_DEFAULT="Reject"
|
REJECT_DEFAULT=AllowICMPs,dropBcasts
|
||||||
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# R S H / R C P C O M M A N D S
|
# R S H / R C P C O M M A N D S
|
||||||
|
|||||||
@ -21,3 +21,4 @@
|
|||||||
# net eth0 - dhcp,nosmurfs
|
# net eth0 - dhcp,nosmurfs
|
||||||
#
|
#
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
LOG=info # Default Log Level
|
||||||
|
|||||||
@ -2,7 +2,7 @@
|
|||||||
#
|
#
|
||||||
# Shorewall Version 5 -- /etc/shorewall6/shorewall6.conf
|
# Shorewall Version 5 -- /etc/shorewall6/shorewall6.conf
|
||||||
#
|
#
|
||||||
# For information about the settings in this file, type "man shorewall6.conf"
|
# For $LOGrmation about the settings in this file, type "man shorewall6.conf"
|
||||||
#
|
#
|
||||||
# Manpage also online at
|
# Manpage also online at
|
||||||
# http://www.shorewall.net/manpages6/shorewall6.conf.html
|
# http://www.shorewall.net/manpages6/shorewall6.conf.html
|
||||||
@ -52,19 +52,19 @@ LOGLIMIT="s:1/sec:10"
|
|||||||
|
|
||||||
LOGTAGONLY=No
|
LOGTAGONLY=No
|
||||||
|
|
||||||
MACLIST_LOG_LEVEL=info
|
MACLIST_LOG_LEVEL=$LOG
|
||||||
|
|
||||||
RELATED_LOG_LEVEL=
|
RELATED_LOG_LEVEL=
|
||||||
|
|
||||||
RPFILTER_LOG_LEVEL=info
|
RPFILTER_LOG_LEVEL=$LOG
|
||||||
|
|
||||||
SFILTER_LOG_LEVEL=info
|
SFILTER_LOG_LEVEL=$LOG
|
||||||
|
|
||||||
SMURF_LOG_LEVEL=info
|
SMURF_LOG_LEVEL=$LOG
|
||||||
|
|
||||||
STARTUP_LOG=/var/log/shorewall6-init.log
|
STARTUP_LOG=/var/log/shorewall6-init.log
|
||||||
|
|
||||||
TCP_FLAGS_LOG_LEVEL=info
|
TCP_FLAGS_LOG_LEVEL=$LOG
|
||||||
|
|
||||||
UNTRACKED_LOG_LEVEL=
|
UNTRACKED_LOG_LEVEL=
|
||||||
|
|
||||||
@ -105,11 +105,11 @@ TC=
|
|||||||
###############################################################################
|
###############################################################################
|
||||||
|
|
||||||
ACCEPT_DEFAULT=none
|
ACCEPT_DEFAULT=none
|
||||||
BLACKLIST_DEFAULT=Drop
|
BLACKLIST_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
DROP_DEFAULT=Drop
|
DROP_DEFAULT=AllowICMPs,dropBcasts,dropNotSyn:$LOG
|
||||||
NFQUEUE_DEFAULT=none
|
NFQUEUE_DEFAULT=none
|
||||||
QUEUE_DEFAULT=none
|
QUEUE_DEFAULT=none
|
||||||
REJECT_DEFAULT=Reject
|
REJECT_DEFAULT=AllowICMPs,dropBcasts
|
||||||
|
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# R S H / R C P C O M M A N D S
|
# R S H / R C P C O M M A N D S
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user