From 4ab8e1f0a22cb11a14ec1b5e02b3f9d1c9aca161 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Tue, 5 Dec 2017 10:21:16 -0800 Subject: [PATCH] Remove PSH from the FIN action Signed-off-by: Tom Eastep --- Shorewall/Actions/action.FIN | 2 +- Shorewall/actions.std | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Shorewall/Actions/action.FIN b/Shorewall/Actions/action.FIN index eb96b5a46..1dfe2cc2f 100644 --- a/Shorewall/Actions/action.FIN +++ b/Shorewall/Actions/action.FIN @@ -30,4 +30,4 @@ DEFAULTS ACCEPT,- -@1 - - ;;+ -p 6 --tcp-flags ACK,FIN,PSH ACK,FIN,PSH +@1 - - ;;+ -p 6 --tcp-flags ACK,FIN ACK,FIN diff --git a/Shorewall/actions.std b/Shorewall/actions.std index 343e6cab1..4400ead11 100644 --- a/Shorewall/actions.std +++ b/Shorewall/actions.std @@ -37,7 +37,7 @@ DropDNSrep inline,proto=17 # Drops DNS replies DropSmurfs noinline # Drop smurf packets Established inline,\ # Handles packets in the ESTABLISHED state state=ESTABLISHED # -FIN inline,audit,\ # Handles ACK,FIN,PSH packets +FIN inline,audit,\ # Handles ACK,FIN packets proto=6 forwardUPnP noinline # Allow traffic that upnpd has redirected from 'upnp' interfaces. GlusterFS inline # Handles GlusterFS