forked from extern/shorewall_code
Update shorewall[6]-rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
137d4bcc90
commit
71d9a03697
@ -66,7 +66,7 @@
|
|||||||
this section.</para>
|
this section.</para>
|
||||||
|
|
||||||
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE</para>
|
REJECT, LOG, NFQUEUE and QUEUE</para>
|
||||||
|
|
||||||
<para>There is an implicit ACCEPT rule inserted at the end of this
|
<para>There is an implicit ACCEPT rule inserted at the end of this
|
||||||
section.</para>
|
section.</para>
|
||||||
@ -81,7 +81,7 @@
|
|||||||
section.</para>
|
section.</para>
|
||||||
|
|
||||||
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE</para>
|
REJECT, LOG, NFQUEUE and QUEUE</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the RELATED_DISPOSITION (<ulink
|
that invokes the RELATED_DISPOSITION (<ulink
|
||||||
@ -97,7 +97,7 @@
|
|||||||
processed by rules in this section.</para>
|
processed by rules in this section.</para>
|
||||||
|
|
||||||
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE.</para>
|
REJECT, LOG, NFQUEUE and QUEUE.</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the INVALID_DISPOSITION (<ulink
|
that invokes the INVALID_DISPOSITION (<ulink
|
||||||
@ -113,7 +113,7 @@
|
|||||||
processed by rules in this section.</para>
|
processed by rules in this section.</para>
|
||||||
|
|
||||||
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE.</para>
|
REJECT, LOG, NFQUEUE and QUEUE.</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the UNTRACKED_DISPOSITION (<ulink
|
that invokes the UNTRACKED_DISPOSITION (<ulink
|
||||||
@ -138,9 +138,8 @@
|
|||||||
comfortable with the differences between the various connection tracking
|
comfortable with the differences between the various connection tracking
|
||||||
states, then it is suggested that you omit the <emphasis
|
states, then it is suggested that you omit the <emphasis
|
||||||
role="bold">ESTABLISHED</emphasis> and <emphasis
|
role="bold">ESTABLISHED</emphasis> and <emphasis
|
||||||
role="bold">RELATED</emphasis> sections and place all of your
|
role="bold">RELATED</emphasis> sections and place all of your rules in
|
||||||
non-blacklisting rules in the NEW section (That's after the line that
|
the NEW section (That's after the line that reads ?SECTION NEW').</para>
|
||||||
reads ?SECTION NEW').</para>
|
|
||||||
</note>
|
</note>
|
||||||
|
|
||||||
<warning>
|
<warning>
|
||||||
|
@ -59,7 +59,7 @@
|
|||||||
this section.</para>
|
this section.</para>
|
||||||
|
|
||||||
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE</para>
|
REJECT, LOG, NFQUEUE and QUEUE</para>
|
||||||
|
|
||||||
<para>There is an implicit ACCEPT rule inserted at the end of this
|
<para>There is an implicit ACCEPT rule inserted at the end of this
|
||||||
section.</para>
|
section.</para>
|
||||||
@ -74,7 +74,7 @@
|
|||||||
section.</para>
|
section.</para>
|
||||||
|
|
||||||
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
<para>The only ACTIONs allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE</para>
|
REJECT, LOG, NFQUEUE and QUEUE</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the RELATED_DISPOSITION (<ulink
|
that invokes the RELATED_DISPOSITION (<ulink
|
||||||
@ -90,7 +90,7 @@
|
|||||||
processed by rules in this section.</para>
|
processed by rules in this section.</para>
|
||||||
|
|
||||||
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE.</para>
|
REJECT, LOG, NFQUEUE and QUEUE.</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the INVALID_DISPOSITION (<ulink
|
that invokes the INVALID_DISPOSITION (<ulink
|
||||||
@ -106,7 +106,7 @@
|
|||||||
processed by rules in this section.</para>
|
processed by rules in this section.</para>
|
||||||
|
|
||||||
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
<para>The only Actions allowed in this section are ACCEPT, DROP,
|
||||||
REJECT, LOG and QUEUE.</para>
|
REJECT, LOG, NFQUEUE and QUEUE.</para>
|
||||||
|
|
||||||
<para>There is an implicit rule added at the end of this section
|
<para>There is an implicit rule added at the end of this section
|
||||||
that invokes the UNTRACKED_DISPOSITION (<ulink
|
that invokes the UNTRACKED_DISPOSITION (<ulink
|
||||||
|
Loading…
Reference in New Issue
Block a user