forked from extern/shorewall_code
Update for 2.0.11
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1759 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
f4dd6371e9
commit
988852448f
@ -43,10 +43,10 @@
|
|||||||
#
|
#
|
||||||
##############################################################################
|
##############################################################################
|
||||||
#SOURCE DEST PROTOCOL SOURCE PORTS DEST PORTS TOS
|
#SOURCE DEST PROTOCOL SOURCE PORTS DEST PORTS TOS
|
||||||
all all tcp - ssh 16
|
all all tcp - 22 16
|
||||||
all all tcp ssh - 16
|
all all tcp 22 - 16
|
||||||
all all tcp - ftp 16
|
all all tcp - 21 16
|
||||||
all all tcp ftp - 16
|
all all tcp 21 - 16
|
||||||
all all tcp ftp-data - 8
|
all all tcp 20 - 8
|
||||||
all all tcp - ftp-data 8
|
all all tcp - 20 8
|
||||||
#LAST LINE -- Add your entries above -- DO NOT REMOVE
|
#LAST LINE -- Add your entries above -- DO NOT REMOVE
|
||||||
|
@ -1,10 +1,11 @@
|
|||||||
#
|
#
|
||||||
# Shorewall 2.0 /etc/shorewall/action.AllowNNTP
|
# Shorewall 2.0 /usr/share/shorewall/action.AllowNNTP
|
||||||
#
|
#
|
||||||
# This action accepts NNTP traffic (Usenet).
|
# This action accepts NNTP traffic (Usenet) and encrypted NNTP (NNTPS)
|
||||||
#
|
#
|
||||||
######################################################################################
|
######################################################################################
|
||||||
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/
|
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/
|
||||||
# PORT PORT(S) LIMIT GROUP
|
# PORT PORT(S) LIMIT GROUP
|
||||||
ACCEPT - - tcp 119
|
ACCEPT - - tcp 119
|
||||||
|
ACCEPT - - tcp 563
|
||||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||||
|
@ -14,9 +14,7 @@
|
|||||||
#
|
#
|
||||||
# Columns are:
|
# Columns are:
|
||||||
#
|
#
|
||||||
# SUBNET The subnet (host addresses also allowed as are IP
|
# SUBNET The subnet (host addresses also allowed)
|
||||||
# address ranges provided that your kernel and iptables
|
|
||||||
# include iprange match support).
|
|
||||||
# TARGET Where to send packets to/from this subnet
|
# TARGET Where to send packets to/from this subnet
|
||||||
# RETURN - let the packet be processed normally
|
# RETURN - let the packet be processed normally
|
||||||
# DROP - silently drop the packet
|
# DROP - silently drop the packet
|
||||||
@ -48,7 +46,6 @@
|
|||||||
42.0.0.0/8 logdrop # Reserved
|
42.0.0.0/8 logdrop # Reserved
|
||||||
49.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98
|
49.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98
|
||||||
50.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98
|
50.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98
|
||||||
58.0.0.0/7 logdrop # Reserved
|
|
||||||
73.0.0.0/8 logdrop # Reserved
|
73.0.0.0/8 logdrop # Reserved
|
||||||
74.0.0.0/7 logdrop # Reserved
|
74.0.0.0/7 logdrop # Reserved
|
||||||
76.0.0.0/6 logdrop # Reserved
|
76.0.0.0/6 logdrop # Reserved
|
||||||
|
@ -1 +1 @@
|
|||||||
2.0.10
|
2.0.11
|
||||||
|
@ -1,10 +1,11 @@
|
|||||||
#
|
#
|
||||||
# Shorewall 2.0 /etc/shorewall/action.AllowNNTP
|
# Shorewall 2.0 /usr/share/shorewall/action.AllowNNTP
|
||||||
#
|
#
|
||||||
# This action accepts NNTP traffic (Usenet).
|
# This action accepts NNTP traffic (Usenet) and encrypted NNTP (NNTPS)
|
||||||
#
|
#
|
||||||
######################################################################################
|
######################################################################################
|
||||||
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/
|
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/
|
||||||
# PORT PORT(S) LIMIT GROUP
|
# PORT PORT(S) LIMIT GROUP
|
||||||
ACCEPT - - tcp 119
|
ACCEPT - - tcp 119
|
||||||
|
ACCEPT - - tcp 563
|
||||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||||
|
@ -79,3 +79,5 @@ Changes in 2.0.11
|
|||||||
2) Correct bogons file.
|
2) Correct bogons file.
|
||||||
|
|
||||||
3) Replace service names by port numbers in /etc/shorewall/tos.
|
3) Replace service names by port numbers in /etc/shorewall/tos.
|
||||||
|
|
||||||
|
4) Added NNTPS to action.AllowNNTP.
|
||||||
|
@ -28,7 +28,7 @@
|
|||||||
# shown below. Simply run this script to revert to your prior version of
|
# shown below. Simply run this script to revert to your prior version of
|
||||||
# Shoreline Firewall.
|
# Shoreline Firewall.
|
||||||
|
|
||||||
VERSION=2.0.10
|
VERSION=2.0.11
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -22,7 +22,7 @@
|
|||||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=2.0.10
|
VERSION=2.0.11
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
@ -540,7 +540,7 @@ fi
|
|||||||
install_file_with_backup firewall ${PREFIX}/usr/share/shorewall/firewall 0544
|
install_file_with_backup firewall ${PREFIX}/usr/share/shorewall/firewall 0544
|
||||||
|
|
||||||
if [ -z "$PREFIX" ]; then
|
if [ -z "$PREFIX" ]; then
|
||||||
if -n "$first_install" ]; then
|
if [ -n "$first_install" ]; then
|
||||||
if [ -n "$DEBIAN" ]; then
|
if [ -n "$DEBIAN" ]; then
|
||||||
run_install -o $OWNER -g $GROUP -m 0644 default.debian /etc/default/shorewall
|
run_install -o $OWNER -g $GROUP -m 0644 default.debian /etc/default/shorewall
|
||||||
ln -s ../init.d/shorewall /etc/rcS.d/S40shorewall
|
ln -s ../init.d/shorewall /etc/rcS.d/S40shorewall
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
Shorewall 2.0.10
|
Shorewall 2.0.11
|
||||||
|
|
||||||
----------------------------------------------------------------------
|
----------------------------------------------------------------------
|
||||||
Problems Corrected in version 2.0.4
|
Problems Corrected in version 2.0.4
|
||||||
@ -181,3 +181,8 @@ Problems corrected in 2.0.11
|
|||||||
2) The bogons file has been updated.
|
2) The bogons file has been updated.
|
||||||
|
|
||||||
3) Service names are replaced by port numbers in /etc/shorewall/tos.
|
3) Service names are replaced by port numbers in /etc/shorewall/tos.
|
||||||
|
-----------------------------------------------------------------------
|
||||||
|
New Features in 2.0.11
|
||||||
|
|
||||||
|
1) The AllowNNTP action now allows NNTP over SSL/TLS (NTTPS).
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall
|
%define name shorewall
|
||||||
%define version 2.0.10
|
%define version 2.0.11
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -141,6 +141,8 @@ fi
|
|||||||
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Nov 22 2004 Tom Eastep tom@shorewall.net
|
||||||
|
- Updated to 2.0.11-1
|
||||||
* Mon Oct 25 2004 Tom Eastep tom@shorewall.net
|
* Mon Oct 25 2004 Tom Eastep tom@shorewall.net
|
||||||
- Updated to 2.0.10-1
|
- Updated to 2.0.10-1
|
||||||
* Thu Sep 23 2004 Tom Eastep tom@shorewall.net
|
* Thu Sep 23 2004 Tom Eastep tom@shorewall.net
|
||||||
|
@ -26,7 +26,7 @@
|
|||||||
# You may only use this script to uninstall the version
|
# You may only use this script to uninstall the version
|
||||||
# shown below. Simply run this script to remove Seattle Firewall
|
# shown below. Simply run this script to remove Seattle Firewall
|
||||||
|
|
||||||
VERSION=2.0.10
|
VERSION=2.0.11
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
Loading…
Reference in New Issue
Block a user