holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code

Browse Source
This commit is contained in:
Tom Eastep 2016-02-15 11:34:30 -08:00
commit 4c5eb2fc1c
134 changed files with 784 additions and 1082 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall/Macros/macro.AMQP
View File

@ -1,12 +1,10 @@
#
# Shorewall - AMQP Macro
# Shorewall -- /usr/share/shorewall/macro.AMQP
#
# /usr/share/shorewall/macro.AMQP
#
# This macro handles AMQP traffic.
# This macro handles AMQP traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5672
PARAM - - udp 5672

9
Shorewall/Macros/macro.A_AllowICMPs
View File

@ -1,13 +1,10 @@
#
# Shorewall - Audited AllowICMPs Macro
# Shorewall -- /usr/share/shorewall/macro.A_AllowICMPs
#
# /usr/share/shorewall/macro.A_AllowICMPs
#
# This macro A_ACCEPTs needed ICMP types
# This macro audits and accepts needed ICMP types.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE
?COMMENT Needed ICMP types

9
Shorewall/Macros/macro.A_DropDNSrep
View File

@ -1,13 +1,10 @@
#
# Shorewall - Audited DropDNSrep Macro
# Shorewall -- /usr/share/shorewall/macro.A_DropDNSrep
#
# /usr/share/shorewall/macro.A_DropDNSrep
#
# This macro silently audites and drops DNS UDP replies
# This macro audits and drops DNS UDP replies.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?COMMENT Late DNS Replies

9
Shorewall/Macros/macro.A_DropUPnP
View File

@ -1,13 +1,10 @@
#
# Shorewall - ADropUPnP Macro
# Shorewall -- /usr/share/shorewall/macro.A_DropUPnP
#
# /usr/share/shorewall/macro.A_DropUPnP
#
# This macro silently drops UPnP probes on UDP port 1900
# This macro audits and drops UPnP probes on UDP port 1900.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?COMMENT UPnP

15
Shorewall/Macros/macro.ActiveDir
View File

@ -1,16 +1,13 @@
#
# Shorewall - Samba 4 Macro
#
# /usr/share/shorewall/macro.ActiveDir
#
# This macro handles ports for Samba 4 Active Directory Service
#
# You can comment out the ports you do not want open
# Shorewall -- /usr/share/shorewall/macro.ActiveDir
#
# This macro handles ports for Samba 4 Active Directory Service.
# You can copy this file to /etc/shorewall[6]/ and comment out the ports you
# do not want open.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 389 #LDAP services
PARAM - - udp 389
PARAM - - tcp 636 #LDAP SSL

9
Shorewall/Macros/macro.AllowICMPs
View File

@ -1,13 +1,10 @@
#
# Shorewall - AllowICMPs Macro
# Shorewall -- /usr/share/shorewall/macro.AllowICMPs
#
# /usr/share/shorewall/macro.AllowICMPs
#
# This macro ACCEPTs needed ICMP types
# This macro ACCEPTs needed ICMP types.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?COMMENT Needed ICMP types

13
Shorewall/Macros/macro.Amanda
View File

@ -1,15 +1,12 @@
#
# Shorewall - Amanda Macro
# Shorewall -- /usr/share/shorewall/macro.Amanda
#
# /usr/share/shorewall/macro.Amanda
#
# This macro handles connections required by the AMANDA backup system
# to back up remote nodes. It does not provide the ability to restore
# files from those nodes.
# This macro handles connections required by the AMANDA backup system
# to back up remote nodes. It does not provide the ability to restore
# files from those nodes.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __AMANDA_HELPER )
PARAM - - udp 10080 { helper=amanda }

10
Shorewall/Macros/macro.Auth
View File

@ -1,11 +1,9 @@
#
# Shorewall - Auth Macro
# Shorewall -- /usr/share/shorewall/macro.Auth
#
# /usr/share/shorewall/macro.Auth
#
# This macro handles Auth (identd) traffic.
# This macro handles Auth (identd) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 113

10
Shorewall/Macros/macro.BGP
View File

@ -1,11 +1,9 @@
#
# Shorewall - BGP Macro
# Shorewall -- /usr/share/shorewall/macro.BGP
#
# /usr/share/shorewall/macro.BGP
#
# This macro handles BGP4 traffic.
# This macro handles BGP4 traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 179 # BGP4

10
Shorewall/Macros/macro.BLACKLIST
View File

@ -1,13 +1,11 @@
#
# Shorewall - blacklist Macro
# Shorewall -- /usr/share/shorewall/macro.blacklist
#
# /usr/share/shorewall/macro.blacklist
#
# This macro handles blacklisting using BLACKLIST_DISPOSITION and BLACKLIST_LOGLEVEL
# This macro handles blacklisting using BLACKLIST_DISPOSITION and BLACKLIST_LOGLEVEL.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if $BLACKLIST_LOGLEVEL
blacklog
?else

15
Shorewall/Macros/macro.BitTorrent
View File

@ -1,19 +1,16 @@
#
# Shorewall - BitTorrent Macro
# Shorewall -- /usr/share/shorewall/macro.BitTorrent
#
# /usr/share/shorewall/macro.BitTorrent
# This macro handles BitTorrent traffic for BitTorrent 3.1 and earlier.
#
# This macro handles BitTorrent traffic for BitTorrent 3.1 and earlier.
#
# If you are running BitTorrent 3.2 or later, you should use the
# BitTorrent32 macro.
# If you are running BitTorrent 3.2 or later, you should use the
# BitTorrent32 macro.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 6881:6889
#
# It may also be necessary to allow UDP traffic:
#
PARAM - - udp 6881
#

11
Shorewall/Macros/macro.BitTorrent32
View File

@ -1,16 +1,13 @@
#
# Shorewall - BitTorrent 3.2 Macro
# Shorewall -- /usr/share/shorewall/macro.BitTorrent32
#
# /usr/share/shorewall/macro.BitTorrent32
#
# This macro handles BitTorrent traffic for BitTorrent 3.2 and later.
# This macro handles BitTorrent traffic for BitTorrent 3.2 and later.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 6881:6999
#
# It may also be necessary to allow UDP traffic:
#
PARAM - - udp 6881
#

10
Shorewall/Macros/macro.CVS
View File

@ -1,11 +1,9 @@
#
# Shorewall - CVS Macro
# Shorewall -- /usr/share/shorewall/macro.CVS
#
# /usr/share/shorewall/macro.CVS
#
# This macro handles connections to the CVS pserver.
# This macro handles connections to the CVS pserver.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 2401

12
Shorewall/Macros/macro.Citrix
View File

@ -1,14 +1,12 @@
#
# Shorewall - Citrix/ICA Macro
# Shorewall -- /usr/share/shorewall/macro.Citrix
#
# /usr/share/shorewall/macro.Citrix
#
# This macro handles Citrix/ICA traffic (ICA, ICA Browser, CGP a.k.a.
# ICA Session Reliability)
# This macro handles Citrix/ICA traffic (ICA, ICA Browser, CGP a.k.a.
# ICA Session Reliability)
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 1494 # ICA
PARAM - - udp 1604 # ICA Browser
PARAM - - tcp 2598 # CGP Session Reliabilty

12
Shorewall/Macros/macro.DAAP
View File

@ -1,13 +1,11 @@
#
# Shorewall - DAAP Macro
# Shorewall -- /usr/share/shorewall/macro.DAAP
#
# /usr/share/shorewall/macro.DAAP
#
# This macro handles DAAP (Digital Audio Access Protocol) traffic.
# The protocol is used by iTunes, Rythmbox and other similar daemons.
# This macro handles DAAP (Digital Audio Access Protocol) traffic.
# The protocol is used by iTunes, Rythmbox and other similar daemons.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 3689
PARAM - - udp 3689

12
Shorewall/Macros/macro.DCC
View File

@ -1,12 +1,10 @@
#
# Shorewall - DCC Macro
# Shorewall -- /usr/share/shorewall/macro.DCC
#
# /usr/share/shorewall/macro.DCC
#
# This macro handles DCC (Distributed Checksum Clearinghouse) traffic.
# DCC is a distributed spam filtering mechanism.
# This macro handles DCC (Distributed Checksum Clearinghouse) traffic.
# DCC is a distributed spam filtering mechanism.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 6277

10
Shorewall/Macros/macro.DHCPfwd
View File

@ -1,12 +1,10 @@
#
# Shorewall - DHCPfwd Macro
# Shorewall -- /usr/share/shorewall/macro.DHCPfwd
#
# /usr/share/shorewall/macro.DHCPfwd
#
# This macro (bidirectional) handles forwarded DHCP traffic
# This macro (bidirectional) handles forwarded DHCP traffic
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 67:68 67:68 # DHCP
PARAM DEST SOURCE udp 67:68 67:68 # DHCP

10
Shorewall/Macros/macro.DNS
View File

@ -1,12 +1,10 @@
#
# Shorewall - DNS Macro
# Shorewall -- /usr/share/shorewall/macro.DNS
#
# /usr/share/shorewall/macro.DNS
#
# This macro handles DNS traffic.
# This macro handles DNS traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 53
PARAM - - tcp 53

10
Shorewall/Macros/macro.Distcc
View File

@ -1,11 +1,9 @@
#
# Shorewall - Distcc Macro
# Shorewall -- /usr/share/shorewall/macro.Distcc
#
# /usr/share/shorewall/macro.Distcc
#
# This macro handles connections to the Distributed Compiler service.
# This macro handles connections to the Distributed Compiler service.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 3632

15
Shorewall/Macros/macro.Drop
View File

@ -1,18 +1,15 @@
#
# Shorewall - Drop Macro
# Shorewall -- /usr/share/shorewall/macro.Drop
#
# /usr/share/shorewall/macro.Drop
# This macro generates the same rules as the Drop default action
# It is used in place of action.Drop when USE_ACTIONS=No.
#
# This macro generates the same rules as the Drop default action
# It is used in place of action.Drop when USE_ACTIONS=No.
# Example:
#
# Example:
#
# Drop net all
# Drop net all
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
#
# Don't log 'auth' DROP
#

9
Shorewall/Macros/macro.DropDNSrep
View File

@ -1,13 +1,10 @@
#
# Shorewall - DropDNSrep Macro
# Shorewall -- /usr/share/shorewall/macro.DropDNSrep
#
# /usr/share/shorewall/macro.DropDNSrep
#
# This macro silently drops DNS UDP replies
# This macro silently drops DNS UDP replies
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?COMMENT Late DNS Replies

9
Shorewall/Macros/macro.DropUPnP
View File

@ -1,13 +1,10 @@
#
# Shorewall - DropUPnP Macro
# Shorewall -- /usr/share/shorewall/macro.DropUPnP
#
# /usr/share/shorewall/macro.DropUPnP
#
# This macro silently drops UPnP probes on UDP port 1900
# This macro silently drops UPnP probes on UDP port 1900
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?COMMENT UPnP

37
Shorewall/Macros/macro.Edonkey
View File

@ -1,34 +1,31 @@
#
# Shorewall - Edonkey Macro
# Shorewall -- /usr/share/shorewall/macro.Edonkey
#
# /usr/share/shorewall/macro.Edonkey
# This macro handles Edonkey traffic.
#
# This macro handles Edonkey traffic.
# http://www.portforward.com/english/routers/port_forwarding/2wire/1000s/eDonkey.htm
# says to use udp 5737 rather than 4665.
#
# http://www.amule.org/wiki/index.php/FAQ_ed2k says this:
#
# http://www.portforward.com/english/routers/port_forwarding/2wire/1000s/eDonkey.htm
# says to use udp 5737 rather than 4665.
# 4661 TCP (outgoing) Port, on which a server listens for connection
# (defined by server).
#
# http://www.amule.org/wiki/index.php/FAQ_ed2k says this:
# 4665 UDP (outgoing) used for global server searches and global source
# queries. This is always Server TCP port (in this case 4661) + 4.
#
# 4661 TCP (outgoing) Port, on which a server listens for connection
# (defined by server).
# 4662 TCP (outgoing and incoming) Client to client transfers.
#
# 4665 UDP (outgoing) used for global server searches and global source
# queries. This is always Server TCP port (in this case 4661) + 4.
# 4672 UDP (outgoing and incoming) Extended eMule protocol, Queue
# Rating, File Reask Ping
#
# 4662 TCP (outgoing and incoming) Client to client transfers.
# 4711 TCP WebServer listening port.
#
# 4672 UDP (outgoing and incoming) Extended eMule protocol, Queue
# Rating, File Reask Ping
#
# 4711 TCP WebServer listening port.
#
# 4712 TCP External Connection port. Used to communicate aMule with other
# applications such as aMule WebServer or aMuleCMD.
# 4712 TCP External Connection port. Used to communicate aMule with other
# applications such as aMule WebServer or aMuleCMD.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 4662
PARAM - - udp 4665

10
Shorewall/Macros/macro.FTP
View File

@ -1,13 +1,11 @@
#
# Shorewall - FTP Macro
# Shorewall -- /usr/share/shorewall/macro.FTP
#
# /usr/share/shorewall/macro.FTP
#
# This macro handles FTP traffic.
# This macro handles FTP traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __FTP_HELPER )
PARAM - - tcp 21 { helper=ftp }
?else

12
Shorewall/Macros/macro.Finger
View File

@ -1,12 +1,10 @@
#
# Shorewall - Finger Macro
# Shorewall -- /usr/share/shorewall/macro.Finger
#
# /usr/share/shorewall/macro.Finger
#
# This macro handles Finger protocol. You should not generally open
# your finger information to internet.
# This macro handles Finger protocol.
# You should not generally open your finger information to internet.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 79

10
Shorewall/Macros/macro.GNUnet
View File

@ -1,13 +1,11 @@
#
# Shorewall - GNUnet Macro
# Shorewall -- /usr/share/shorewall/macro.GNUnet
#
# /usr/share/shorewall/macro.GNUnet
#
# This macro handles GNUnet (secure peer-to-peer networking) traffic.
# This macro handles GNUnet (secure peer-to-peer networking) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 2086
PARAM - - udp 2086
PARAM - - tcp 1080

11
Shorewall/Macros/macro.GRE
View File

@ -1,13 +1,10 @@
#
# Shorewall - GRE Macro
# Shorewall -- /usr/share/shorewall/macro.GRE
#
# /usr/share/shorewall/macro.GRE
#
# This macro (bi-directional) handles Generic Routing Encapsulation
# traffic (RFC 1701)
# This macro (bidirectional) handles Generic Routing Encapsulation (GRE).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - 47 # GRE
PARAM DEST SOURCE 47 # GRE

10
Shorewall/Macros/macro.Git
View File

@ -1,11 +1,9 @@
#
# Shorewall - Git Macro
# Shorewall -- /usr/share/shorewall/macro.Git
#
# /usr/share/shorewall/macro.Git
#
# This macro handles Git traffic.
# This macro handles Git traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 9418

10
Shorewall/Macros/macro.Gnutella
View File

@ -1,12 +1,10 @@
#
# Shorewall - Gnutella Macro
# Shorewall -- /usr/share/shorewall/macro.Gnutella
#
# /usr/share/shorewall/macro.Gnutella
#
# This macro handles Gnutella traffic.
# This macro handles Gnutella traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 6346
PARAM - - udp 6346

19
Shorewall/Macros/macro.Goto-Meeting
View File

@ -1,12 +1,11 @@
#
# Shorewall - Citrix/Goto Meeting macro
# Shorewall -- /usr/share/shorewall/macro.Goto-Meeting
#
# /usr/share/shorewall/macro.Goto-Meeting
# by Eric Teeter
# This macro handles Citrix/Goto Meeting
# Assumes that ports 80 and 443 are already open
# If needed, use the macros that open Http and Https to reduce redundancy
####################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - tcp 8200 # Goto Meeting only needed (TCP outbound)
# This macro handles Citrix/Goto Meeting.
#
###############################################################################
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 8200 # Goto Meeting only needed outbound
HTTP
HTTPS

10
Shorewall/Macros/macro.HKP
View File

@ -1,11 +1,9 @@
#
# Shorewall - HKP Macro
# Shorewall -- /usr/share/shorewall/macro.HKP
#
# /usr/share/shorewall/macro.HKP
#
# This macro handles OpenPGP HTTP keyserver protocol traffic.
# This macro handles OpenPGP HTTP keyserver protocol traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 11371

10
Shorewall/Macros/macro.HTTP
View File

@ -1,11 +1,9 @@
#
# Shorewall - HTTP Macro
# Shorewall -- /usr/share/shorewall/macro.HTTP
#
# /usr/share/shorewall/macro.HTTP
#
# This macro handles plaintext HTTP (WWW) traffic.
# This macro handles plaintext HTTP (WWW) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 80

10
Shorewall/Macros/macro.HTTPS
View File

@ -1,11 +1,9 @@
#
# Shorewall - HTTPS Macro
# Shorewall -- /usr/share/shorewall/macro.HTTPS
#
# /usr/share/shorewall/macro.HTTPS
#
# This macro handles HTTPS (WWW over SSL) traffic.
# This macro handles HTTPS (WWW over TLS) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 443

10
Shorewall/Macros/macro.ICPV2
View File

@ -1,11 +1,9 @@
#
# Shorewall - ICPV2 Macro
# Shorewall - /usr/share/shorewall/macro.ICPV2
#
# /usr/share/shorewall/macro.ICPV2
#
# This macro handles Internet Cache Protocol V2 (Squid) traffic
# This macro handles Internet Cache Protocol V2 (Squid) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 3130

10
Shorewall/Macros/macro.ICQ
View File

@ -1,11 +1,9 @@
#
# Shorewall - ICQ Macro
# Shorewall -- /usr/share/shorewall/macro.ICQ
#
# /usr/share/shorewall/macro.ICQ
#
# This macro handles ICQ, now called AOL Instant Messenger (or AIM).
# This macro handles ICQ, now called AOL Instant Messenger (or AIM).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5190

14
Shorewall/Macros/macro.ILO
View File

@ -1,15 +1,13 @@
#
# Shorewall - ILO Macro
# Shorewall -- /usr/share/shorewall/macro.ILO
#
# /usr/share/shorewall/macro.ILO
#
# This macro handles console redirection with HP ILO 2+,
# Use this macro to open access to your ILO interface from management
# workstations.
# This macro handles console redirection with HP ILO 2+,
# Use this macro to open access to your ILO interface from management
# workstations.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 3002 # Raw serial data
PARAM - - tcp 9300 # Shared Remote Console
PARAM - - tcp 17988 # Virtual Media

12
Shorewall/Macros/macro.IMAP
View File

@ -1,12 +1,10 @@
#
# Shorewall - IMAP Macro
# Shorewall -- /usr/share/shorewall/macro.IMAP
#
# /usr/share/shorewall/macro.IMAP
#
# This macro handles plaintext IMAP traffic. For encrypted IMAP,
# see macro.IMAPS.
# This macro handles plaintext and STARTTLS IMAP traffic.
# For SSL (TLS) IMAP, see macro.IMAPS.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 143

13
Shorewall/Macros/macro.IMAPS
View File

@ -1,12 +1,11 @@
#
# Shorewall - IMAPS Macro
# Shorewall -- /usr/share/shorewall/macro.IMAPS
#
# /usr/share/shorewall/macro.IMAPS
#
# This macro handles encrypted IMAP traffic. For plaintext IMAP
# (not recommended), see macro.IMAP.
# This macro handles SSL (TLS) IMAP traffic.
# For plaintext (not recommended) and STARTLS (recommended) IMAP see
# macro.IMAP.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 993

10
Shorewall/Macros/macro.IPIP
View File

@ -1,12 +1,10 @@
#
# Shorewall - IPIP Macro
# Shorewall -- /usr/share/shorewall/macro.IPIP
#
# /usr/share/shorewall/macro.IPIP
#
# This macro (bidirectional) handles IPIP capsulation traffic
# This macro (bidirectional) handles IPIP capsulation traffic
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - 94 # IPIP
PARAM DEST SOURCE 94 # IPIP

17
Shorewall/Macros/macro.IPMI
View File

@ -1,16 +1,15 @@
#
# Shorewall - IPMI Macro
# Shorewall -- /usr/share/shorewall/macro.IPMI
#
# /usr/share/shorewall/macro.IPMI
#
# This macro handles IPMI console redirection with Asus (AMI),
# Dell DRAC5+ (Avocent), and Supermicro (Aten or AMI).
# Use this macro to open access to your IPMI interface from management
# workstations.
# This macro handles IPMI console redirection with RMCP protocol.
# Tested to work with with Asus (AMI),
# Dell DRAC5+ (Avocent), and Supermicro (Aten or AMI).
# Use this macro to open access to your IPMI interface from management
# workstations.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 623 # RMCP
PARAM - - tcp 3668,3669 # Virtual Media, Secure (Dell)
PARAM - - tcp 5120,5123 # CD, floppy (Asus, Aten)

10
Shorewall/Macros/macro.IPP
View File

@ -1,11 +1,9 @@
#
# Shorewall - IPP Macro
# Shorewall -- /usr/share/shorewall/macro.IPP
#
# /usr/share/shorewall/macro.IPP
#
# This macro handles Internet Printing Protocol (IPP).
# This macro handles Internet Printing Protocol (IPP).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 631

14
Shorewall/Macros/macro.IPPbrd
View File

@ -1,13 +1,11 @@
#
# Shorewall - IPP Broadcast Macro
# Shorewall -- /usr/share/shorewall/macro.IPPbrd
#
# /usr/share/shorewall/macro.IPPbrd
#
# This macro handles Internet Printing Protocol (IPP) broadcasts.
# If you also need to handle TCP 631 connections in the opposite
# direction, use the IPPserver Macro
# This macro handles Internet Printing Protocol (IPP) broadcasts.
# If you also need to handle TCP 631 connections in the opposite
# direction, use the IPPserver Macro
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 631

37
Shorewall/Macros/macro.IPPserver
View File

@ -1,29 +1,28 @@
#
# Shorewall - IPPserver Macro
# Shorewall -- /usr/share/shorewall/macro.IPPserver
#
# /usr/share/shorewall/macro.IPPserver
# This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows
# print queue broadcasts from the server to the client, and
# printing connections from the client to the server.
#
# This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows
# print queue broadcasts from the server to the client, and
# printing connections from the client to the server.
# Example usage on a single-interface firewall which is a print client:
#
# Example usage on a single-interface firewall which is a print
# client:
# IPPserver/ACCEPT $FW net
# IPPserver(ACCEPT) $FW net
#
# Example for a two-interface firewall which acts as a print
# server for loc:
# IPPserver/ACCEPT loc $FW
# Example for a two-interface firewall which acts as a print server for loc:
#
# NOTE: If you want both to serve requests for local printers and
# listen to requests for remote printers (i.e. your CUPS server is
# also a client), you need to apply the rule twice, e.g.
# IPPserver/ACCEPT loc $FW
# IPPserver/ACCEPT $FW loc
# IPPserver(ACCEPT) loc $FW
#
# NOTE: If you want both to serve requests for local printers and listen to
# requests for remote printers (i.e. your CUPS server is also a client),
# you need to apply the rule twice, e.g.
#
# IPPserver(ACCEPT) loc $FW
# IPPserver(ACCEPT) $FW loc
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM SOURCE DEST tcp 631
PARAM DEST SOURCE udp 631

10
Shorewall/Macros/macro.IPsec
View File

@ -1,13 +1,11 @@
#
# Shorewall - IPsec Macro
# Shorewall -- /usr/share/shorewall/macro.IPsec
#
# /usr/share/shorewall/macro.IPsec
#
# This macro (bidirectional) handles IPsec traffic
# This macro (bidirectional) handles IPsec traffic
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 500 500 # IKE
PARAM - - 50 # ESP
PARAM DEST SOURCE udp 500 500 # IKE

12
Shorewall/Macros/macro.IPsecah
View File

@ -1,14 +1,12 @@
#
# Shorewall - IPsecah Macro
# Shorewall -- /usr/share/shorewall/macro.IPsecah
#
# /usr/share/shorewall/macro.IPsecah
#
# This macro (bidirectional) handles IPsec authentication (AH) traffic.
# This is insecure. You should use ESP with encryption for security.
# This macro (bidirectional) handles IPsec authentication (AH) traffic.
# This is insecure. You should use ESP with encryption for security.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 500 500 # IKE
PARAM - - 51 # AH
PARAM DEST SOURCE udp 500 500 # IKE

10
Shorewall/Macros/macro.IPsecnat
View File

@ -1,13 +1,11 @@
#
# Shorewall - IPsecnat Macro
# Shorewall -- /usr/share/shorewall/macro.IPsecnat
#
# /usr/share/shorewall/macro.IPsecnat
#
# This macro (bidirectional) handles IPsec traffic and Nat-Traversal
# This macro (bidirectional) handles IPsec traffic and Nat-Traversal
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 500 # IKE
PARAM - - udp 4500 # NAT-T
PARAM - - 50 # ESP

9
Shorewall/Macros/macro.IRC
View File

@ -1,13 +1,10 @@
#
# Shorewall IRC Macro
# Shorewall -- /usr/share/shorewall/macro.IRC
#
# /usr/share/shorewall/macro.IRC
#
# This macro handles IRC traffic (Internet Relay Chat).
# This macro handles IRC traffic (Internet Relay Chat).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __IRC_HELPER )
PARAM - - tcp 6667 { helper=irc }

17
Shorewall/Macros/macro.JAP
View File

@ -1,17 +1,14 @@
#
# Shorewall - JAP Macro
# Shorewall -- /usr/share/shorewall/macro.JAP
#
# /usr/share/shorewall/macro.JAP
#
# This macro handles JAP Anon Proxy traffic. This macro is for
# administrators running a Mix server. It is NOT for people trying
# to browse anonymously!
# This macro handles JAP Anon Proxy Mix server traffic.
# It is NOT for people trying to browse anonymously!
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 8080 # HTTP port
PARAM - - tcp 6544 # HTTP port
PARAM - - tcp 6543 # InfoService port
HTTPS(PARAM)
SSH(PARAM)
HTTPS
SSH

10
Shorewall/Macros/macro.Jabber
View File

@ -1,11 +1,9 @@
#
# Shorewall - Jabber Macro
# Shorewall -- /usr/share/shorewall/macro.Jabber
#
# /usr/share/shorewall/macro.Jabber
#
# This macro accepts Jabber traffic.
# This macro handles Jabber traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5222

11
Shorewall/Macros/macro.JabberPlain
View File

@ -1,12 +1,9 @@
#
# Shorewall - JabberPlain Macro
# Shorewall -- /usr/share/shorewall/macro.JabberPlain
#
# /usr/share/shorewall/macro.JabberPlain
#
# This macro accepts Jabber traffic (plaintext). This macro is
# deprecated - use of macro.Jabber instead is recommended.
# This macro is deprecated - use of macro.Jabber instead is recommended.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
Jabber

12
Shorewall/Macros/macro.JabberSecure
View File

@ -1,13 +1,9 @@
#
# Shorewall - JabberSecure (SSL) Macro
# Shorewall -- /usr/share/shorewall/macro.JabberSecure
#
# /usr/share/shorewall/macro.JabberSecure
#
# This macro accepts Jabber traffic (SSL). Use of Jabber with SSL
# is deprecated, please configure Jabber with STARTTLS and use
# Jabber macro instead.
# This macro handles deprecated Jabber (SSL) traffic. Use STARTTLS instead.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5223

10
Shorewall/Macros/macro.Jabberd
View File

@ -1,11 +1,9 @@
#
# Shorewall - Jabberd (server intercommunication)
# Shorewall -- /usr/share/shorewall/macro.Jabberd
#
# /usr/share/shorewall/macro.Jabberd
#
# This macro accepts Jabberd intercommunication traffic
# This macro handles Jabberd intercommunication traffic
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5269

10
Shorewall/Macros/macro.Jetdirect
View File

@ -1,11 +1,9 @@
#
# Shorewall - Jetdirect Macro
# Shorewall -- /usr/share/shorewall/macro.Jetdirect
#
# /usr/share/shorewall/macro.Jetdirect
#
# This macro handles HP Jetdirect printing.
# This macro handles HP Jetdirect printing.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 9100

10
Shorewall/Macros/macro.Kerberos
View File

@ -1,12 +1,10 @@
#
# Shorewall - Kerberos Macro
# Shorewall -- /usr/share/shorewall/macro.Kerberos
#
# /usr/share/shorewall/macro.Kerberos
#
# This macro handles Kerberos traffic.
# This macro handles Kerberos traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 88
PARAM - - udp 88

12
Shorewall/Macros/macro.L2TP
View File

@ -1,13 +1,11 @@
#
# Shorewall - L2TP Macro
# Shorewall -- /usr/share/shorewall/macro.L2TP
#
# /usr/share/shorewall/macro.L2TP
#
# This macro (bidirectional) handles Layer 2 Tunneling Protocol traffic
# (RFC 2661)
# This macro (bidirectional) handles Layer 2 Tunneling Protocol traffic.
# (RFC 2661)
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 1701 # L2TP
PARAM DEST SOURCE udp 1701 # L2TP

20
Shorewall/Macros/macro.LDAP
View File

@ -1,16 +1,14 @@
#
# Shorewall - LDAP Macro
# Shorewall -- /usr/share/shorewall/macro.LDAP
#
# /usr/share/shorewall/macro.LDAP
#
# This macro handles plaintext LDAP traffic. For encrypted LDAP
# traffic, see macro.LDAPS. Use of LDAPS is recommended (and is
# required by some directory services) if you want to do user
# authentication over LDAP. Note that some LDAP implementations
# support initiating TLS connections via the plaintext LDAP port.
# Consult your LDAP server documentation for details.
# This macro handles plaintext LDAP traffic. For encrypted LDAP
# traffic, see macro.LDAPS. Use of LDAPS is recommended (and is
# required by some directory services) if you want to do user
# authentication over LDAP. Note that some LDAP implementations
# support initiating TLS connections via the plaintext LDAP port.
# Consult your LDAP server documentation for details.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 389

20
Shorewall/Macros/macro.LDAPS
View File

@ -1,16 +1,14 @@
#
# Shorewall - LDAPS Macro
# Shorewall -- /usr/share/shorewall/macro.LDAPS
#
# /usr/share/shorewall/macro.LDAPS
#
# This macro handles encrypted LDAP traffic. For plaintext LDAP
# traffic, see macro.LDAP. Use of LDAPS is recommended (and is
# required by some directory services) if you want to do user
# authentication over LDAP. Note that some LDAP implementations
# support initiating TLS connections via the plaintext LDAP port.
# Consult your LDAP server documentation for details.
# This macro handles encrypted LDAP traffic. For plaintext LDAP
# traffic, see macro.LDAP. Use of LDAPS is recommended (and is
# required by some directory services) if you want to do user
# authentication over LDAP. Note that some LDAP implementations
# support initiating TLS connections via the plaintext LDAP port.
# Consult your LDAP server documentation for details.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 636

9
Shorewall/Macros/macro.MSA Normal file
View File

@ -0,0 +1,9 @@
#
# Shorewall -- /usr/share/shorewall/macro.MSA
#
# This macro handles mail message submission agent (MSA) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 587

10
Shorewall/Macros/macro.MSNP
View File

@ -1,11 +1,9 @@
#
# Shorewall - MSNP Macro
# Shorewall - /usr/share/shorewall/macro.MSNP
#
# /usr/share/shorewall/macro.MSNP
#
# This macro handles MSNP (MicroSoft Notification Protocol)
# This macro handles MSNP (MicroSoft Notification Protocol)
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 1863

10
Shorewall/Macros/macro.MSSQL
View File

@ -1,12 +1,10 @@
#
# Shorewall - MSSQL Macro
# Shorewall -- /usr/share/shorewall/macro.MSSQL
#
# /usr/share/shorewall/macro.MSSQL
#
# This macro handles MSSQL (Microsoft SQL Server)
# This macro handles MSSQL (Microsoft SQL Server)
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 1433
PARAM - - udp 1434

26
Shorewall/Macros/macro.Mail
View File

@ -1,19 +1,17 @@
#
# Shorewall - Mail Macro
# Shorewall -- /usr/share/shorewall/macro.Mail
#
# /usr/share/shorewall/macro.Mail
# This macro handles SMTP (email secure and insecure) traffic.
# It's the aggregate of macro.SMTP, macro.SMTPS, macro.MSA.
#
# This macro handles SMTP (email secure and insecure) traffic.
# It's the aggregate of macro.SMTP, macro.SMTPS, macro.Submission.
#
# Note: This macro handles traffic between an MUA (Email client)
# and an MTA (mail server) or between MTAs. It does not enable
# reading of email via POP3 or IMAP. For those you need to use
# the POP3 or IMAP macros.
# Note: This macro handles traffic between an MUA (Email client)
# and an MTA (mail server) or between MTAs. It does not enable
# reading of email via POP3 or IMAP. For those you need to use
# the POP3 or IMAP macros.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - tcp 25
PARAM - - tcp 465
PARAM - - tcp 587
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
SMTP
SMTPS
MSA

10
Shorewall/Macros/macro.MongoDB
View File

@ -1,11 +1,9 @@
#
# Shorewall - MongoDB Macro
# Shorewall -- /usr/share/shorewall/macro.MongoDB
#
# /usr/share/shorewall/macro.MongoDB
#
# This macro handles MongoDB Daemon/Router traffic.
# This macro handles MongoDB Daemon/Router traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 27017

10
Shorewall/Macros/macro.Munin
View File

@ -1,11 +1,9 @@
#
# Shorewall - Munin Macro
# Shorewall -- /usr/share/shorewall/macro.Munin
#
# /usr/share/shorewall/macro.Munin
#
# This macro handles Munin networked resource monitoring traffic
# This macro handles Munin networked resource monitoring traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 4949

10
Shorewall/Macros/macro.MySQL
View File

@ -1,11 +1,9 @@
#
# Shorewall - MySQL Macro
# Shorewall -- /usr/share/shorewall/macro.MySQL
#
# /usr/share/shorewall/macro.MySQL
#
# This macro handles connections to the MySQL server.
# This macro handles connections to the MySQL server.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 3306

12
Shorewall/Macros/macro.NNTP
View File

@ -1,12 +1,10 @@
#
# Shorewall NNTP Macro
# Shorewall -- /usr/share/shorewall/macro.NNTP
#
# /usr/share/shorewall/macro.NNTP
#
# This macro handles plaintext NNTP traffic (Usenet). For
# encrypted NNTP, see macro.NNTPS.
# This macro handles plaintext NNTP traffic (Usenet).
# For encrypted NNTP, see macro.NNTPS.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 119

12
Shorewall/Macros/macro.NNTPS
View File

@ -1,12 +1,10 @@
#
# Shorewall NNTPS Macro
# Shorewall -- /usr/share/shorewall/macro.NNTPS
#
# /usr/share/shorewall/macro.NNTPS
#
# This macro handles encrypted NNTP traffic (Usenet). For
# plaintext NNTP, see macro.NNTP.
# This macro handles encrypted NNTP traffic (Usenet).
# For plaintext NNTP, see macro.NNTP.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 563

12
Shorewall/Macros/macro.NTP
View File

@ -1,12 +1,10 @@
#
# Shorewall - NTP Macro
# Shorewall -- /usr/share/shorewall/macro.NTP
#
# /usr/share/shorewall/macro.NTP
#
# This macro handles NTP traffic (ntpd).
# For broadcast NTP traffic, use NTPbrd Macro.
# This macro handles NTP traffic.
# For broadcast NTP traffic, use NTPbrd Macro.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 123

14
Shorewall/Macros/macro.NTPbi
View File

@ -1,12 +1,10 @@
#
# Shorewall - NTPbi Macro
# Shorewall -- /usr/share/shorewall/macro.NTPbi
#
# /usr/share/shorewall/macro.NTPbi
#
# This macro handles bi-directional NTP (for NTP peers)
# This macro handles bi-directional NTP (for NTP peers).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - udp 123
PARAM DEST SOURCE udp 123
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
NTP
NTP DEST SOURCE

21
Shorewall/Macros/macro.NTPbrd
View File

@ -1,17 +1,14 @@
#
# Shorewall - NTPbrd Macro
# Shorewall -- /usr/share/shorewall/macro.NTPbrd
#
# /usr/share/shorewall/macro.NTPbrd
# This macro handles NTP traffic including replies to Broadcast NTP traffic.
#
# This macro handles NTP traffic (ntpd) including replies to Broadcast
# NTP traffic.
#
# It is recommended only to use this where the source host is trusted -
# otherwise it opens up a large hole in your firewall because
# Netfilter doesn't track connections for broadcast traffic.
# It is recommended only to use this where the source host is trusted -
# otherwise it opens up a large hole in your firewall because
# Netfilter doesn't track connections for broadcast traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - udp 123
PARAM - - udp 1024: 123
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 123
PARAM - - udp 1024: 123

10
Shorewall/Macros/macro.OSPF
View File

@ -1,11 +1,9 @@
#
# Shorewall - OSPF Macro
# Shorewall -- /usr/share/shorewall/macro.OSPF
#
# /usr/share/shorewall/macro.OSPF
#
# This macro handles OSPF multicast traffic
# This macro handles OSPF multicast traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - 89 # OSPF

10
Shorewall/Macros/macro.OpenVPN
View File

@ -1,11 +1,9 @@
#
# Shorewall - OpenVPN Macro
# Shorewall -- /usr/share/shorewall/macro.OpenVPN
#
# /usr/share/shorewall/macro.OpenVPN Macro
#
# This macro handles OpenVPN traffic.
# This macro handles OpenVPN traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 1194

10
Shorewall/Macros/macro.PCA
View File

@ -1,12 +1,10 @@
#
# Shorewall - PCA Macro
# Shorewall -- /usr/share/shorewall/macro.PCA
#
# /usr/share/shorewall/macro.PCA
#
# This macro handles PCAnywere (tm)
# This macro handles PCAnywere (tm) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 5632
PARAM - - tcp 5631

12
Shorewall/Macros/macro.POP3
View File

@ -1,12 +1,10 @@
#
# Shorewall - POP3 Macro
# Shorewall -- /usr/share/shorewall/macro.POP3
#
# /usr/share/shorewall/macro.POP3
#
# This macro handles plaintext POP3 traffic. For encrypted POP3,
# see macro.POP3S.
# This macro handles plaintext POP3 traffic.
# For encrypted POP3, see macro.POP3S.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 110

12
Shorewall/Macros/macro.POP3S
View File

@ -1,12 +1,10 @@
#
# Shorewall - POP3S Macro
# Shorewall -- /usr/share/shorewall/macro.POP3S
#
# /usr/share/shorewall/macro.POP3S
#
# This macro handles encrypted POP3 traffic. For plaintext POP3,
# see macro.POP3.
# This macro handles encrypted POP3 traffic.
# For plaintext POP3, see macro.POP3.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 995 # Secure POP3

13
Shorewall/Macros/macro.PPtP
View File

@ -1,15 +1,12 @@
#
# Shorewall - PPTP Macro
# Shorewall -- /usr/share/shorewall/macro.PPtP Macro
#
# /usr/share/shorewall/macro.PPtP Macro
#
# This macro handles PPTP traffic.
# This macro handles PPTP traffic. NOTE: PPTP protocol is insecure.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - 47
PARAM DEST SOURCE 47
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
GRE
?if ( __CT_TARGET && ! $AUTOHELPERS && __PPTP_HELPER )
PARAM - - tcp 1723 { helper=pptp }

10
Shorewall/Macros/macro.Ping
View File

@ -1,11 +1,9 @@
#
# Shorewall - Ping Macro
# Shorewall -- /usr/share/shorewall/macro.Ping
#
# /usr/share/shorewall/macro.Ping
#
# This macro handles 'ping' requests.
# This macro handles ICMP 'ping' requests.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - icmp 8

10
Shorewall/Macros/macro.PostgreSQL
View File

@ -1,11 +1,9 @@
#
# Shorewall - PostgreSQL Macro
# Shorewall -- /usr/share/shorewall/macro.PostgreSQL
#
# /usr/share/shorewall/macro.PostgreSQL
#
# This macro handles connections to the PostgreSQL server.
# This macro handles connections to the PostgreSQL server.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 5432

10
Shorewall/Macros/macro.Printer
View File

@ -1,11 +1,9 @@
#
# Shorewall - Printer Macro
# Shorewall -- /usr/share/shorewall/macro.Printer
#
# /usr/share/shorewall/macro.Printer
#
# This macro handles Line Printer protocol printing.
# This macro handles Line Printer protocol printing.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 515

11
Shorewall/Macros/macro.Puppet
View File

@ -1,12 +1,9 @@
#
# Shorewall - Puppet Macro
# Shorewall -- /usr/share/shorewall/macro.Puppet
#
# /usr/share/shorewall/macro.Puppet
#
# This macro handles client-to-server for the Puppet configuration
# management system.
# This macro handles client-to-server for the Puppet configuration management.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 8140

10
Shorewall/Macros/macro.QUIC
View File

@ -1,11 +1,9 @@
#
# Shorewall - QUIC Macro
# Shorewall -- /usr/share/shorewall/macro.QUIC
#
# /usr/share/shorewall/macro.QUIC
#
# This macro handles QUIC (Quick UDP Internet Connections).
# This macro handles QUIC (Quick UDP Internet Connections).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 80,443

10
Shorewall/Macros/macro.RDP
View File

@ -1,11 +1,9 @@
#
# Shorewall - RDP Macro
# Shorewall -- /usr/share/shorewall/macro.RDP
#
# /usr/share/shorewall/macro.RDP
#
# This macro handles Microsoft RDP (Remote Desktop) traffic.
# This macro handles Microsoft RDP (Remote Desktop) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 3389

10
Shorewall/Macros/macro.RIPbi
View File

@ -1,12 +1,10 @@
#
# Shorewall - RIPbi Macro
# Shorewall -- /usr/share/shorewall/macro.RIPbi
#
# /usr/share/shorewall/macro.RIPbi
#
# This macro handles RIP (Routing Information Protocol) - bidirectional
# This macro (bidirectional) handles Routing Information Protocol (RIP).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 520
PARAM DEST SOURCE udp 520

10
Shorewall/Macros/macro.RNDC
View File

@ -1,11 +1,9 @@
#
# Shorewall - RNDC Macro
# Shorewall -- /usr/share/shorewall/macro.RNDC
#
# /usr/share/shorewall/macro.RNDC
#
# This macro handles RNDC (BIND remote management protocol) traffic.
# This macro handles BIND remote management protocol (RNDC) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 953

10
Shorewall/Macros/macro.Razor
View File

@ -1,11 +1,9 @@
#
# Shorewall - Razor Macro
# Shorewall -- /usr/share/shorewall/macro.Razor
#
# /usr/share/shorewall/macro.Razor
#
# This macro handles traffic for the Razor Antispam System
# This macro handles traffic for the Razor Antispam System
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
ACCEPT - - tcp 2703

18
Shorewall/Macros/macro.Rdate
View File

@ -1,15 +1,13 @@
#
# Shorewall - Rdate Macro
# Shorewall -- /usr/share/shorewall/macro.Rdate
#
# /usr/share/shorewall/macro.Rdate
#
# This macro handles remote time retrieval (rdate).
# Unless you are supporting extremely old hardware or software,
# you shouldn't be using this. NTP is a superior alternative.
# And even if you need to use rfc 868 Time protocol you should
# use Time macro instead.
# This macro handles remote time retrieval (rdate).
# Unless you are supporting extremely old hardware or software,
# you shouldn't be using this. NTP is a superior alternative.
# And even if you need to use rfc 868 Time protocol you should
# use Time macro instead.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 37

10
Shorewall/Macros/macro.Redis
View File

@ -1,11 +1,9 @@
#
# Shorewall - Redis Macro
# Shorewall -- /usr/share/shorewall/macro.Redis
#
# /usr/share/shorewall/macro.Redis
#
# This macro handles Redis traffic.
# This macro handles Redis traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 6379

16
Shorewall/Macros/macro.Reject
View File

@ -1,19 +1,15 @@
#
# Shorewall - Reject Macro
# Shorewall -- /usr/share/shorewall/macro.Reject
#
# /usr/share/shorewall/macro.Reject
# This macro generates the same rules as the Reject default action
# It is used in place of action.Reject when USE_ACTIONS=No.
#
# This macro generates the same rules as the Reject default action
# It is used in place of action.Reject when USE_ACTIONS=No.
#
# Example:
#
# Reject loc fw
# Example:
#
# Reject loc fw
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
#
# Don't log 'auth' REJECT
#

18
Shorewall/Macros/macro.Rfc1918
View File

@ -1,14 +1,10 @@
#
# Shorewall - Macro Template
# Shorewall -- /usr/share/shorewall/macro.Rfc1918
#
# /usr/share/shorewall/macro.Rfc1918
# This macro handles SOURCE or ORIGDEST address reserved by RFC 1918.
#
# This macro handles pkts with a SOURCE or ORIGINAL DEST address
# reserved by RFC 1918
#
#############################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM SOURCE:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 \
DEST
PARAM SOURCE DEST - - - 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
###############################################################################
#ACTION SOURCE DEST
PARAM SOURCE:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 DEST
PARAM SOURCE DEST { origdest=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 }

10
Shorewall/Macros/macro.Rsync
View File

@ -1,11 +1,9 @@
#
# Shorewall - Rsync Macro
# Shorewall -- /usr/share/shorewall/macro.Rsync
#
# /usr/share/shorewall/macro.Rsync
#
# This macro handles connections to the rsync server.
# This macro handles connections to the rsync server.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 873

12
Shorewall/Macros/macro.SANE
View File

@ -1,13 +1,10 @@
#
# Shorewall - SANE Macro
# Shorewall -- /usr/share/shorewall/macro.SANE
#
# /usr/share/shorewall/macro.SANE
#
# This macro handles SANE network scanning.
# This macro handles SANE network scanning.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __SANE_HELPER )
PARAM - - tcp 6566 { helper=sane }
@ -17,7 +14,8 @@
#
# Kernels 2.6.23+ has nf_conntrack_sane module which will handle
# sane data connection.
# sane data connection. If you need these, copy this file to /etc/shorewall
# and remove comments from one of the entries below.
#
# If you don't have sane conntracking support you need to open whole dynamic
# port range.

9
Shorewall/Macros/macro.SIP
View File

@ -1,13 +1,10 @@
#
# Shorewall - SIP Macro
# Shorewall -- /usr/share/shorewall/macro.SIP
#
# /usr/share/shorewall/macro.SIP
#
# This macro handles SIP traffic.
# This macro handles SIP traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __SIP_HELPER )
PARAM - - udp 5060 { helper=sip }

18
Shorewall/Macros/macro.SMB
View File

@ -1,17 +1,15 @@
#
# Shorewall - SMB Macro
# Shorewall -- /usr/share/shorewall/macro.SMB
#
# /usr/share/shorewall/macro.SMB
#
# This macro handles Microsoft SMB traffic. You need to invoke
# this macro in both directions. Beware! This rule opens a lot
# of ports, and could possibly be used to compromise your firewall
# if not used with care. You should only allow SMB traffic
# between hosts you fully trust.
# This macro handles Microsoft SMB traffic.
# You need to invoke this macro in both directions.
# Beware! This rule opens a lot of ports, and could possibly be used to
# compromise your firewall if not used with care. You should only allow SMB
# traffic between hosts you fully trust.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 135,445
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )

38
Shorewall/Macros/macro.SMBBI
View File

@ -1,36 +1,14 @@
#
# Shorewall - SMB Bi-directional Macro
# Shorewall -- /usr/share/shorewall/macro.SMBBI
#
# /usr/share/shorewall/macro.SMBBI
# This macro (bidirectional) handles Microsoft SMB traffic.
#
# This macro (bidirectional) handles Microsoft SMB traffic.
#
# Beware! This macro opens a lot of ports, and could possibly be used
# to compromise your firewall if not used with care. You should only
# allow SMB traffic between hosts you fully trust.
# Beware! This macro opens a lot of ports, and could possibly be used
# to compromise your firewall if not used with care. You should only
# allow SMB traffic between hosts you fully trust.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - udp 135,445
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )
PARAM - - udp 137 { helper=netbios-ns }
PARAM - - udp 138:139
?else
PARAM - - udp 137:139
?endif
PARAM - - udp 1024: 137
PARAM - - tcp 135,139,445
PARAM DEST SOURCE udp 135,445
?if ( __CT_TARGET && ! $AUTOHELPERS && __NETBIOS_NS_HELPER )
PARAM DEST SOURCE udp 137 { helper=netbios-ns }
PARAM DEST SOURCE udp 138:139
?else
PARAM DEST SOURCE udp 137:139
?endif
PARAM DEST SOURCE udp 1024: 137
PARAM DEST SOURCE tcp 135,139,445
SMB
SMB DEST SOURCE

11
Shorewall/Macros/macro.SMBswat
View File

@ -1,12 +1,9 @@
#
# Shorewall - SMBswat Macro
# Shorewall -- /usr/share/shorewall/macro.SMBswat
#
# /usr/share/shorewall/macro.SMBswat
#
# This macro handles connections to the Samba Web Administration Tool
# (SWAT).
# This macro handles connections to the Samba Web Administration Tool (SWAT).
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 901

21
Shorewall/Macros/macro.SMTP
View File

@ -1,19 +1,12 @@
#
# Shorewall - SMTP Macro
# Shorewall -- /usr/share/shorewall/macro.SMTP
#
# /usr/share/shorewall/macro.SMTP
#
# This macro handles plaintext SMTP (email) traffic. For SMTP
# encrypted over SSL, use macro.SMTPS. Note that STARTTLS can be
# used over the standard STMP port, so the use of this macro
# doesn't necessarily imply the use of an insecure connection.
#
# Note: This macro handles traffic between an MUA (Email client)
# and an MTA (mail server) or between MTAs. It does not enable
# reading of email via POP3 or IMAP. For those you need to use
# the POP3 or IMAP macros.
# This macro handles SMTP (email) traffic.
# For deprecated SMTP encrypted over SSL (TLS), use macro.SMTPS.
# Note that STARTTLS can be used over the standard STMP port, so the use of
# this macro doesn't necessarily imply the use of an insecure connection.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 25

16
Shorewall/Macros/macro.SMTPS
View File

@ -1,16 +1,10 @@
#
# Shorewall - SMTPS Macro
# Shorewall -- /usr/share/shorewall/macro.SMTPS
#
# /usr/share/shorewall/macro.SMTPS
#
# This macro handles encrypted SMTPS (email) traffic.
#
# Note: This macro handles traffic between an MUA (Email client)
# and an MTA (mail server) or between MTAs. It does not enable
# reading of email via POP3 or IMAP. For those you need to use
# the POP3(S) or IMAP(S) macros.
# This macro handles legacy SMTP over SSL (TLS) traffic.
# You should configure SMTP STARTTLS instead.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 465

12
Shorewall/Macros/macro.SNMP
View File

@ -1,15 +1,11 @@
#
# Shorewall - SNMP Macro
# Shorewall -- /usr/share/shorewall/macro.SNMP
#
# /usr/share/shorewall/macro.SNMP
#
# This macro handles SNMP traffic.
#
# Note: To allow SNMP Traps, use the SNMPTrap macro
# This macro handles SNMP traffic.
# Note: To allow SNMP Traps, use the SNMPTrap macro.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
?if ( __CT_TARGET && ! $AUTOHELPERS && __SNMP_HELPER )
PARAM - - udp 161 { helper=snmp }

10
Shorewall/Macros/macro.SNMPTrap
View File

@ -1,11 +1,9 @@
#
# Shorewall - SNMP Trap Macro
# Shorewall - /usr/share/shorewall/macro.SNMPtrap
#
# /usr/share/shorewall/macro.SNMPtrap
#
# This macro handles SNMP traps.
# This macro handles SNMP traps.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 162

10
Shorewall/Macros/macro.SPAMD
View File

@ -1,11 +1,9 @@
#
# Shorewall - SPAMD Macro
# Shorewall -- /usr/share/shorewall/macro.SPAMD
#
# /usr/share/shorewall/macro.SPAMD
#
# This macro handles Spam Assassin SPAMD traffic.
# This macro handles SpamAssassin SPAMD traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 783

10
Shorewall/Macros/macro.SSH
View File

@ -1,11 +1,9 @@
#
# Shorewall - SSH Macro
# Shorewall -- /usr/share/shorewall/macro.SSH
#
# /usr/share/shorewall/macro.SSH
#
# This macro handles secure shell (SSH) traffic.
# This macro handles secure shell (SSH) traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - tcp 22

Some files were not shown because too many files have changed in this diff Show More