forked from extern/shorewall_code
Add action.AllowPCA and a comment for the terminally stupid
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1138 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
c3b2e30934
commit
6f0f82e8c1
@ -35,6 +35,7 @@ AllowRdate #Allow remote time (rdate).
|
|||||||
AllowNNTP #Allow network news (Usenet).
|
AllowNNTP #Allow network news (Usenet).
|
||||||
AllowTrcrt #Allows Traceroute (20 hops)
|
AllowTrcrt #Allows Traceroute (20 hops)
|
||||||
AllowSNMP #Allows SNMP (including traps)
|
AllowSNMP #Allows SNMP (including traps)
|
||||||
|
AllowPCA #Allows PCAnywhere (tm)
|
||||||
|
|
||||||
Drop:DROP #Common Action for DROP policy
|
Drop:DROP #Common Action for DROP policy
|
||||||
Reject:REJECT #Common Action for REJECT policy
|
Reject:REJECT #Common Action for REJECT policy
|
||||||
|
@ -36,3 +36,5 @@ Changes since 1.4.10
|
|||||||
17) Make "trace" a synonym for "debug"
|
17) Make "trace" a synonym for "debug"
|
||||||
|
|
||||||
18) Add the ":noah" option to IPSEC tunnels.
|
18) Add the ":noah" option to IPSEC tunnels.
|
||||||
|
|
||||||
|
19) Added a comment to the rules file to aid users who are terminally stupid.
|
||||||
|
@ -4,7 +4,10 @@
|
|||||||
# /etc/shorewall/rules
|
# /etc/shorewall/rules
|
||||||
#
|
#
|
||||||
# Rules in this file govern connection establishment. Requests and
|
# Rules in this file govern connection establishment. Requests and
|
||||||
# responses are automatically allowed using connection tracking.
|
# responses are automatically allowed using connection tracking. For any
|
||||||
|
# particular (source,dest) pair of zones, the rules are evaluated in the
|
||||||
|
# order in which they appear in this file and the first match is the one
|
||||||
|
# that determines the disposition of the request.
|
||||||
#
|
#
|
||||||
# In most places where an IP address or subnet is allowed, you
|
# In most places where an IP address or subnet is allowed, you
|
||||||
# can preceed the address/subnet with "!" (e.g., !192.168.1.0/24) to
|
# can preceed the address/subnet with "!" (e.g., !192.168.1.0/24) to
|
||||||
|
@ -104,6 +104,7 @@ fi
|
|||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowIMAP
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowIMAP
|
||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowNNTP
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowNNTP
|
||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowNTP
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowNTP
|
||||||
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowPCA
|
||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowPing
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowPing
|
||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowPOP3
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowPOP3
|
||||||
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowRdate
|
%attr(0600,root,root) %config(noreplace) /etc/shorewall/action.AllowRdate
|
||||||
@ -135,6 +136,8 @@ fi
|
|||||||
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Thu Feb 12 2004 Tom Eastep <tom@shorewall.net>
|
||||||
|
- Added action.AllowPCA
|
||||||
* Sun Feb 08 2004 Tom Eastep <tom@shorewall.net>
|
* Sun Feb 08 2004 Tom Eastep <tom@shorewall.net>
|
||||||
- Updates for Shorewall 2.0.0.
|
- Updates for Shorewall 2.0.0.
|
||||||
* Mon Dec 29 2003 Tom Eastep <tom@shorewall.net>
|
* Mon Dec 29 2003 Tom Eastep <tom@shorewall.net>
|
||||||
|
Loading…
Reference in New Issue
Block a user