diff --git a/Shorewall/Actions/action.A_Drop b/Shorewall/Actions/action.A_Drop.deprecated similarity index 95% rename from Shorewall/Actions/action.A_Drop rename to Shorewall/Actions/action.A_Drop.deprecated index d2256705b..4b221cc63 100644 --- a/Shorewall/Actions/action.A_Drop +++ b/Shorewall/Actions/action.A_Drop.deprecated @@ -31,9 +31,10 @@ Auth(A_DROP) # A_AllowICMPs - - icmp # -# Don't log broadcasts +# Don't log broadcasts and multicasts # dropBcast(audit) +dropMcast(audit) # # Drop packets that are in the INVALID state -- these are usually ICMP packets # and just confuse people when they appear in the log. diff --git a/Shorewall/Actions/action.A_Reject.deprecated b/Shorewall/Actions/action.A_Reject.deprecated index b371e5231..93317efb7 100644 --- a/Shorewall/Actions/action.A_Reject.deprecated +++ b/Shorewall/Actions/action.A_Reject.deprecated @@ -25,10 +25,11 @@ COUNT # A_AllowICMPs - - icmp # -# Drop Broadcasts so they don't clutter up the log -# (broadcasts must *not* be rejected). +# Drop Broadcasts and multicasts so they don't clutter up the log +# (these must *not* be rejected). # dropBcast(audit) +dropMcast(audit) # # Drop packets that are in the INVALID state -- these are usually ICMP packets # and just confuse people when they appear in the log (these ICMPs cannot be