From 62ff6d3fa5bfe79f0d906072e4c02cf54f1f7aeb Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 23 Jan 2017 09:26:19 -0800 Subject: [PATCH] Remove obsolete macros Signed-off-by: Tom Eastep --- Shorewall/Macros/macro.Drop | 49 ----------------------------------- Shorewall/Macros/macro.Reject | 49 ----------------------------------- 2 files changed, 98 deletions(-) delete mode 100644 Shorewall/Macros/macro.Drop delete mode 100644 Shorewall/Macros/macro.Reject diff --git a/Shorewall/Macros/macro.Drop b/Shorewall/Macros/macro.Drop deleted file mode 100644 index c45b69ad4..000000000 --- a/Shorewall/Macros/macro.Drop +++ /dev/null @@ -1,49 +0,0 @@ -# -# Shorewall -- /usr/share/shorewall/macro.Drop -# -# This macro generates the same rules as the Drop default action -# It is used in place of action.Drop when USE_ACTIONS=No. -# -# Example: -# -# Drop net all -# -############################################################################### -#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER -# -# Don't log 'auth' DROP -# -DROP - - tcp 113 -# -# Drop Broadcasts so they don't clutter up the log -# (broadcasts must *not* be rejected). -# -dropBcast -# -# ACCEPT critical ICMP types -# -ACCEPT - - icmp fragmentation-needed -ACCEPT - - icmp time-exceeded -# -# Drop packets that are in the INVALID state -- these are usually ICMP packets -# and just confuse people when they appear in the log (these ICMPs cannot be -# rejected). -# -dropInvalid -# -# Drop Microsoft noise so that it doesn't clutter up the log. -# -DROP - - udp 135,445 -DROP - - udp 137:139 -DROP - - udp 1024: 137 -DROP - - tcp 135,139,445 -DROP - - udp 1900 -# -# Drop 'newnotsyn' traffic so that it doesn't get logged. -# -dropNotSyn -# -# Drop late-arriving DNS replies. These are just a nuisance and clutter up -# the log. -# -DROP - - udp - 53 diff --git a/Shorewall/Macros/macro.Reject b/Shorewall/Macros/macro.Reject deleted file mode 100644 index abf2473e1..000000000 --- a/Shorewall/Macros/macro.Reject +++ /dev/null @@ -1,49 +0,0 @@ -# -# Shorewall -- /usr/share/shorewall/macro.Reject -# -# This macro generates the same rules as the Reject default action -# It is used in place of action.Reject when USE_ACTIONS=No. -# -# Example: -# -# Reject loc fw -# -############################################################################### -#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER -# -# Don't log 'auth' REJECT -# -REJECT - - tcp 113 -# -# Drop Broadcasts so they don't clutter up the log -# (broadcasts must *not* be rejected). -# -dropBcast -# -# ACCEPT critical ICMP types -# -ACCEPT - - icmp fragmentation-needed -ACCEPT - - icmp time-exceeded -# -# Drop packets that are in the INVALID state -- these are usually ICMP packets -# and just confuse people when they appear in the log (these ICMPs cannot be -# rejected). -# -dropInvalid -# -# Reject Microsoft noise so that it doesn't clutter up the log. -# -REJECT - - udp 135,445 -REJECT - - udp 137:139 -REJECT - - udp 1024: 137 -REJECT - - tcp 135,139,445 -DROP - - udp 1900 -# -# Drop 'newnotsyn' traffic so that it doesn't get logged. -# -dropNotSyn -# -# Drop late-arriving DNS replies. These are just a nuisance and clutter up -# the log. -# -DROP - - udp - 53