forked from extern/shorewall_code
Macro conversion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9025 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep
parent
f5b950f7a6
commit
a47c9b9871
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 4 - Accounting File
|
||||
# Shorewall6 version 4 - Accounting File
|
||||
#
|
||||
# For information about entries in this file, type "man shorewall-accounting"
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Drop Action
|
||||
# Shorewall6 version 4 - Drop Action
|
||||
#
|
||||
# /usr/share/shorewall/action.Drop
|
||||
# /usr/share/shorewall6/action.Drop
|
||||
#
|
||||
# The default DROP common rules
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Reject Action
|
||||
# Shorewall6 version 4 - Reject Action
|
||||
#
|
||||
# /usr/share/shorewall/action.Reject
|
||||
# /usr/share/shorewall6/action.Reject
|
||||
#
|
||||
# The default REJECT action common rules
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Action Template
|
||||
# Shorewall6 version 4 - Action Template
|
||||
#
|
||||
# /etc/shorewall/action.template
|
||||
# /etc/shorewall6/action.template
|
||||
#
|
||||
# This file is a template for files with names of the form
|
||||
# /etc/shorewall/action.<action-name> where <action> is an
|
||||
@ -77,36 +77,12 @@
|
||||
# address; mac addresses must begin with "~" and must use
|
||||
# "-" as a separator.
|
||||
#
|
||||
# 192.168.2.2 Host 192.168.2.2
|
||||
#
|
||||
# 155.186.235.0/24 Subnet 155.186.235.0/24
|
||||
#
|
||||
# 10.0.0.4-10.0.0.9 Range of IP addresses; your
|
||||
# kernel and iptables must have
|
||||
# iprange match support.
|
||||
#
|
||||
# +remote The name of an ipset prefaced
|
||||
# by "+". Your kernel and
|
||||
# iptables must have set match
|
||||
# support
|
||||
#
|
||||
# +remote[4] The name of the ipset may
|
||||
# followed by a number of
|
||||
# levels of ipset bindings
|
||||
# enclosed in square brackets.
|
||||
#
|
||||
# 192.168.1.1,192.168.1.2
|
||||
# Hosts 192.168.1.1 and
|
||||
# 192.168.1.2.
|
||||
# ~00-A0-C9-15-39-78 Host with
|
||||
# MAC address 00:A0:C9:15:39:78.
|
||||
#
|
||||
# Alternatively, clients may be specified by interface
|
||||
# name. For example, eth1 specifies a
|
||||
# client that communicates with the firewall system
|
||||
# through eth1. This may be optionally followed by
|
||||
# another colon (":") and an IP/MAC/subnet address
|
||||
# as described above (e.g., eth1:192.168.1.5).
|
||||
# enclosed in square brackets.
|
||||
#
|
||||
# DEST Location of destination host. Same as above with
|
||||
# the exception that MAC addresses are not allowed and
|
||||
@ -116,7 +92,7 @@
|
||||
# PROTO Protocol - Must be "tcp", "tcp:syn", "udp", "icmp",
|
||||
# "ipp2p", "ipp2p:udp", "ipp2p:all", a number, or "all".
|
||||
# "ipp2p*" requires ipp2p match support in your kernel
|
||||
# and iptables.
|
||||
# and ip6tables.
|
||||
#
|
||||
# "tcp:syn" implies "tcp" plus the SYN flag must be
|
||||
# set and the RST, ACK and FIN flags must be reset.
|
||||
@ -190,9 +166,6 @@
|
||||
# #the 'kids' group
|
||||
# !:kids #program must not be run by a member
|
||||
# #of the 'kids' group
|
||||
# +upnpd #program named upnpd (This feature was
|
||||
# #removed from Netfilter in kernel
|
||||
# #version 2.6.14).
|
||||
#
|
||||
###############################################################################
|
||||
#TARGET SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# Shorewall version 4 - Actions File
|
||||
# Shorewall6 version 4 - Actions File
|
||||
#
|
||||
# /etc/shorewall/actions
|
||||
# /etc/shorewall6/actions
|
||||
#
|
||||
# For information about entries in this file, type "man shorewall-actions"
|
||||
# For information about entries in this file, type "man shorewall6-actions"
|
||||
#
|
||||
# Please see http://shorewall.net/Actions.html for additional information.
|
||||
#
|
||||
|
||||
@ -8,6 +8,8 @@
|
||||
#
|
||||
# Builtin Actions are:
|
||||
#
|
||||
# allowBcasts # Accept multicast and anycast packets
|
||||
# dropBcasts # Silently Drop multicast and anycast packets
|
||||
# dropNotSyn # Silently Drop Non-syn TCP packets
|
||||
# rejNotSyn # Silently Reject Non-syn TCP packets
|
||||
# dropInvalid # Silently Drop packets that are in the INVALID
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Blacklist File
|
||||
# Shorewall6 version 4 - Blacklist File
|
||||
#
|
||||
# For information about entries in this file, type "man shorewall-blacklist"
|
||||
# For information about entries in this file, type "man shorewall6-blacklist"
|
||||
#
|
||||
# Please see http://shorewall.net/blacklisting_support.htm for additional
|
||||
# information.
|
||||
|
||||
@ -1,10 +1,10 @@
|
||||
#
|
||||
# Shorewall version 4 - Hosts file
|
||||
# Shorewall6 version 4 - Hosts file
|
||||
#
|
||||
# For information about entries in this file, type "man shorewall-hosts"
|
||||
# For information about entries in this file, type "man shorewall6-hosts"
|
||||
#
|
||||
# The manpage is also online at
|
||||
# http://www.shorewall.net/manpages/shorewall-hosts.html
|
||||
# http://www.shorewall.net/manpages6/shorewall6-hosts.html
|
||||
#
|
||||
###############################################################################
|
||||
#ZONE HOST(S) OPTIONS
|
||||
|
||||
@ -1,10 +1,10 @@
|
||||
#
|
||||
# Shorewall version 4 - Init File
|
||||
# Shorewall6 version 4 - Init File
|
||||
#
|
||||
# /etc/shorewall/init
|
||||
# /etc/shorewall6/init
|
||||
#
|
||||
# Add commands below that you want to be executed at the beginning of
|
||||
# a "shorewall start" or "shorewall restart" command.
|
||||
# a "shorewall6 start" or "shorewall6 restart" command.
|
||||
#
|
||||
# For additional information, see
|
||||
# http://shorewall.net/shorewall_extension_scripts.htm
|
||||
|
||||
@ -1,14 +0,0 @@
|
||||
#
|
||||
# Shorewall version 4 - Initdone File
|
||||
#
|
||||
# /etc/shorewall/initdone
|
||||
#
|
||||
# Add commands below that you want to be executed during
|
||||
# "shorewall start" or "shorewall restart" commands at the point where
|
||||
# Shorewall has not yet added any perminent rules to the builtin chains.
|
||||
#
|
||||
# For additional information, see
|
||||
# http://shorewall.net/shorewall_extension_scripts.htm
|
||||
#
|
||||
###############################################################################
|
||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||
@ -1,7 +0,0 @@
|
||||
#
|
||||
# The /etc/shorewall/ipsec file is obsolete -- the information
|
||||
# previously contained in this file is now placed in the
|
||||
# /etc/shorewall/zones file.
|
||||
#
|
||||
# See the IPSECFILE option in shorewall.conf for further information.
|
||||
#
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Maclist file
|
||||
# Shorewall6 version 4 - Maclist file
|
||||
#
|
||||
# For information about entries in this file, type "man shorewall-maclist"
|
||||
# For information about entries in this file, type "man shorewall6-maclist"
|
||||
#
|
||||
# For additional information, see http://shorewall.net/MAC_Validation.html
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - AllowICMPs Macro
|
||||
# Shorewall6 version 4 - AllowICMPs Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.AllowICMPs
|
||||
# /usr/share/shorewall6/macro.AllowICMPs
|
||||
#
|
||||
# This macro ACCEPTs needed ICMP types
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Amanda Macro
|
||||
# Shorewall6 version 4 - Amanda Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Amanda
|
||||
# /usr/share/shorewall6/macro.Amanda
|
||||
#
|
||||
# This macro handles connections required by the AMANDA backup system
|
||||
# to back up remote nodes. It does not provide the ability to restore
|
||||
@ -14,7 +14,7 @@ PARAM - - udp 10080
|
||||
#
|
||||
# You may also need this rule. With AMANDA 2.4.4 on Linux kernel 2.6,
|
||||
# it should not be necessary to use this. The ip_conntrack_amanda
|
||||
# kernel module should be loaded (via /etc/shorewall/modules) on all
|
||||
# kernel module should be loaded (via /etc/shorewall6/modules) on all
|
||||
# systems which need to pass AMANDA traffic through netfilter.
|
||||
#PARAM - - tcp 50000:50100
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Auth Macro
|
||||
# Shorewall6 version 4 - Auth Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Auth
|
||||
# /usr/share/shorewall6/macro.Auth
|
||||
#
|
||||
# This macro handles Auth (identd) traffic.
|
||||
#
|
||||
|
||||
@ -1,13 +1,13 @@
|
||||
#
|
||||
# Shorewall version 4 - BitTorrent Macro
|
||||
# Shorewall6 version 4 - BitTorrent Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.BitTorrent
|
||||
# /usr/share/shorewall6/macro.BitTorrent
|
||||
#
|
||||
# This macro handles BitTorrent traffic.
|
||||
#
|
||||
# If you are running a more modern BitTorrent client, then you may need
|
||||
# to tweak the open port range. This can be done by copying the below
|
||||
# rules into /etc/shorewall and making the necessary edits there:
|
||||
# rules into /etc/shorewall6 and making the necessary edits there:
|
||||
#
|
||||
# Replace 6881:6889 with 6881:6899
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - CVS Macro
|
||||
# Shorewall6 version 4 - CVS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.CVS
|
||||
# /usr/share/shorewall6/macro.CVS
|
||||
#
|
||||
# This macro handles connections to the CVS pserver.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - DAAP Macro
|
||||
# Shorewall6 version 4 - DAAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DAAP
|
||||
# /usr/share/shorewall6/macro.DAAP
|
||||
#
|
||||
# This macro handles DAAP (Digital Audio Access Protocol) traffic.
|
||||
# The protocol is used by iTunes, Rythmbox and other similar daemons.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - DCC Macro
|
||||
# Shorewall6 version 4 - DCC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DCC
|
||||
# /usr/share/shorewall6/macro.DCC
|
||||
#
|
||||
# This macro handles DCC (Distributed Checksum Clearinghouse) traffic.
|
||||
# DCC is a distributed spam filtering mechanism.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - DNS Macro
|
||||
# Shorewall6 version 4 - DNS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DNS
|
||||
# /usr/share/shorewall6/macro.DNS
|
||||
#
|
||||
# This macro handles DNS traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Distcc Macro
|
||||
# Shorewall6 version 4 - Distcc Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Distcc
|
||||
# /usr/share/shorewall6/macro.Distcc
|
||||
#
|
||||
# This macro handles connections to the Distributed Compiler service.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Drop Macro
|
||||
# Shorewall6 version 4 - Drop Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Drop
|
||||
# /usr/share/shorewall6/macro.Drop
|
||||
#
|
||||
# This macro generates the same rules as the Drop default action
|
||||
# It is used in place of action.Drop when USE_ACTIONS=No.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - DropDNSrep Macro
|
||||
# Shorewall6 version 4 - DropDNSrep Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DropDNSrep
|
||||
# /usr/share/shorewall6/macro.DropDNSrep
|
||||
#
|
||||
# This macro silently drops DNS UDP replies
|
||||
#
|
||||
|
||||
@ -1,15 +0,0 @@
|
||||
#
|
||||
# Shorewall version 4 - DropUPnP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DropUPnP
|
||||
#
|
||||
# This macro silently drops UPnP probes on UDP port 1900
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
|
||||
# PORT(S) PORT(S) LIMIT GROUP
|
||||
|
||||
COMMENT UPnP
|
||||
|
||||
DROP - - udp 1900
|
||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Edonkey Macro
|
||||
# Shorewall6 version 4 - Edonkey Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Edonkey
|
||||
# /usr/share/shorewall6/macro.Edonkey
|
||||
#
|
||||
# This macro handles Edonkey traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - FTP Macro
|
||||
# Shorewall6 version 4 - FTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.FTP
|
||||
# /usr/share/shorewall6/macro.FTP
|
||||
#
|
||||
# This macro handles FTP traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Finger Macro
|
||||
# Shorewall6 version 4 - Finger Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Finger
|
||||
# /usr/share/shorewall6/macro.Finger
|
||||
#
|
||||
# This macro handles Finger protocol. You should not generally open
|
||||
# your finger information to internet.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - GNUnet Macro
|
||||
# Shorewall6 version 4 - GNUnet Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.GNUnet
|
||||
# /usr/share/shorewall6/macro.GNUnet
|
||||
#
|
||||
# This macro handles GNUnet (secure peer-to-peer networking) traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - GRE Macro
|
||||
# Shorewall6 version 4 - GRE Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.GRE
|
||||
# /usr/share/shorewall6/macro.GRE
|
||||
#
|
||||
# This macro (bi-directional) handles Generic Routing Encapsulation
|
||||
# traffic (RFC 1701)
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Gnutella Macro
|
||||
# Shorewall6 version 4 - Gnutella Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Gnutella
|
||||
# /usr/share/shorewall6/macro.Gnutella
|
||||
#
|
||||
# This macro handles Gnutella traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - HTTP Macro
|
||||
# Shorewall6 version 4 - HTTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.HTTP
|
||||
# /usr/share/shorewall6/macro.HTTP
|
||||
#
|
||||
# This macro handles plaintext HTTP (WWW) traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - HTTPS Macro
|
||||
# Shorewall6 version 4 - HTTPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.HTTPS
|
||||
# /usr/share/shorewall6/macro.HTTPS
|
||||
#
|
||||
# This macro handles HTTPS (WWW over SSL) traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - ICQ Macro
|
||||
# Shorewall6 version 4 - ICQ Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.ICQ
|
||||
# /usr/share/shorewall6/macro.ICQ
|
||||
#
|
||||
# This macro handles ICQ, now called AOL Instant Messenger (or AIM).
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IMAP Macro
|
||||
# Shorewall6 version 4 - IMAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IMAP
|
||||
# /usr/share/shorewall6/macro.IMAP
|
||||
#
|
||||
# This macro handles plaintext IMAP traffic. For encrypted IMAP,
|
||||
# see macro.IMAPS.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IMAPS Macro
|
||||
# Shorewall6 version 4 - IMAPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IMAPS
|
||||
# /usr/share/shorewall6/macro.IMAPS
|
||||
#
|
||||
# This macro handles encrypted IMAP traffic. For plaintext IMAP
|
||||
# (not recommended), see macro.IMAP.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IPIP Macro
|
||||
# Shorewall6 version 4 - IPIP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPIP
|
||||
# /usr/share/shorewall6/macro.IPIP
|
||||
#
|
||||
# This macro (bidirectional) handles IPIP capsulation traffic
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.2 - IPPserver Macro
|
||||
# Shorewall6 version 4 - IPPserver Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPPserver
|
||||
# /usr/share/shorewall6/macro.IPPserver
|
||||
#
|
||||
# This macro handles Internet Printing Protocol (IPP), indicating
|
||||
# that DEST is a printing server for SOURCE. The macro allows
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IPsec Macro
|
||||
# Shorewall6 version 4 - IPsec Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsec
|
||||
# /usr/share/shorewall6/macro.IPsec
|
||||
#
|
||||
# This macro (bidirectional) handles IPsec traffic
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IPsecah Macro
|
||||
# Shorewall6 version 4 - IPsecah Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsecah
|
||||
# /usr/share/shorewall6/macro.IPsecah
|
||||
#
|
||||
# This macro (bidirectional) handles IPsec authentication (AH) traffic.
|
||||
# This is insecure. You should use ESP with encryption for security.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - IPsecnat Macro
|
||||
# Shorewall6 version 4 - IPsecnat Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsecnat
|
||||
# /usr/share/shorewall6/macro.IPsecnat
|
||||
#
|
||||
# This macro (bidirectional) handles IPsec traffic and Nat-Traversal
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - JAP Macro
|
||||
# Shorewall6 version 4 - JAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JAP
|
||||
# /usr/share/shorewall6/macro.JAP
|
||||
#
|
||||
# This macro handles JAP Anon Proxy traffic. This macro is for
|
||||
# administrators running a Mix server. It is NOT for people trying
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.4 - JabberPlain Macro
|
||||
# Shorewall6 version 4 - JabberPlain Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JabberPlain
|
||||
# /usr/share/shorewall6/macro.JabberPlain
|
||||
#
|
||||
# This macro accepts Jabber traffic (plaintext).
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.4 - JabberSecure (ssl) Macro
|
||||
# Shorewall6 version 4 - JabberSecure (ssl) Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JabberSecure
|
||||
# /usr/share/shorewall6/macro.JabberSecure
|
||||
#
|
||||
# This macro accepts Jabber traffic (ssl).
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.4 - Jabberd (server intercommunication)
|
||||
# Shorewall6 version 4 - Jabberd (server intercommunication)
|
||||
#
|
||||
# /usr/share/shorewall/macro.Jabberd
|
||||
# /usr/share/shorewall6/macro.Jabberd
|
||||
#
|
||||
# This macro accepts Jabberd intercommunication traffic
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.2 - Jetdirect Macro
|
||||
# Shorewall6 version 4 - Jetdirect Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Jetdirect
|
||||
# /usr/share/shorewall6/macro.Jetdirect
|
||||
#
|
||||
# This macro handles HP Jetdirect printing.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - L2TP Macro
|
||||
# Shorewall6 version 4 - L2TP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.L2TP
|
||||
# /usr/share/shorewall6/macro.L2TP
|
||||
#
|
||||
# This macro (bidirectional) handles Layer 2 Tunneling Protocol traffic
|
||||
# (RFC 2661)
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - LDAP Macro
|
||||
# Shorewall6 version 4 - LDAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.LDAP
|
||||
# /usr/share/shorewall6/macro.LDAP
|
||||
#
|
||||
# This macro handles plaintext LDAP traffic. For encrypted LDAP
|
||||
# traffic, see macro.LDAPS. Use of LDAPS is recommended (and is
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - LDAPS Macro
|
||||
# Shorewall6 version 4 - LDAPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.LDAPS
|
||||
# /usr/share/shorewall6/macro.LDAPS
|
||||
#
|
||||
# This macro handles encrypted LDAP traffic. For plaintext LDAP
|
||||
# traffic, see macro.LDAP. Use of LDAPS is recommended (and is
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Mail Macro
|
||||
# Shorewall6 version 4 - Mail Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Mail
|
||||
# /usr/share/shorewall6/macro.Mail
|
||||
#
|
||||
# This macro handles SMTP (email secure and insecure) traffic.
|
||||
# It's the aggregate of macro.SMTP, macro.SMTPS, macro.Submission.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - MySQL Macro
|
||||
# Shorewall6 version 4 - MySQL Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.MySQL
|
||||
# /usr/share/shorewall6/macro.MySQL
|
||||
#
|
||||
# This macro handles connections to the MySQL server.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 NNTP Macro
|
||||
# Shorewall6 version 4 NNTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NNTP
|
||||
# /usr/share/shorewall6/macro.NNTP
|
||||
#
|
||||
# This macro handles plaintext NNTP traffic (Usenet). For
|
||||
# encrypted NNTP, see macro.NNTPS.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 NNTPS Macro
|
||||
# Shorewall6 version 4 NNTPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NNTPS
|
||||
# /usr/share/shorewall6/macro.NNTPS
|
||||
#
|
||||
# This macro handles encrypted NNTP traffic (Usenet). For
|
||||
# plaintext NNTP, see macro.NNTP.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - NTP Macro
|
||||
# Shorewall6 version 4 - NTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NTP
|
||||
# /usr/share/shorewall6/macro.NTP
|
||||
#
|
||||
# This macro handles NTP traffic (ntpd).
|
||||
# For broadcast NTP traffic, use NTPbrd Macro.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - OpenVPN Macro
|
||||
# Shorewall6 version 4 - OpenVPN Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.OpenVPN Macro
|
||||
# /usr/share/shorewall6/macro.OpenVPN Macro
|
||||
#
|
||||
# This macro handles OpenVPN traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - PCA Macro
|
||||
# Shorewall6 version 4 - PCA Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PCA
|
||||
# /usr/share/shorewall6/macro.PCA
|
||||
#
|
||||
# This macro handles PCAnywere (tm)
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - POP3 Macro
|
||||
# Shorewall6 version 4 - POP3 Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.POP3
|
||||
# /usr/share/shorewall6/macro.POP3
|
||||
#
|
||||
# This macro handles plaintext POP3 traffic. For encrypted POP3,
|
||||
# see macro.POP3S.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - POP3S Macro
|
||||
# Shorewall6 version 4 - POP3S Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.POP3S
|
||||
# /usr/share/shorewall6/macro.POP3S
|
||||
#
|
||||
# This macro handles encrypted POP3 traffic. For plaintext POP3,
|
||||
# see macro.POP3.
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - PPTP Macro
|
||||
# Shorewall6 version 4 - PPTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PPtP Macro
|
||||
# /usr/share/shorewall6/macro.PPtP Macro
|
||||
#
|
||||
# This macro handles PPTP traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - PostgreSQL Macro
|
||||
# Shorewall6 version 4 - PostgreSQL Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PostgreSQL
|
||||
# /usr/share/shorewall6/macro.PostgreSQL
|
||||
#
|
||||
# This macro handles connections to the PostgreSQL server.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.2 - Printer Macro
|
||||
# Shorewall6 version 4 - Printer Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Printer
|
||||
# /usr/share/shorewall6/macro.Printer
|
||||
#
|
||||
# This macro handles Line Printer protocol printing.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 3.2 - RDP Macro
|
||||
# Shorewall6 version 4 - RDP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.RDP
|
||||
# /usr/share/shorewall6/macro.RDP
|
||||
#
|
||||
# This macro handles Microsoft RDP (Remote Desktop) traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - RNDC Macro
|
||||
# Shorewall6 version 4 - RNDC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.RNDC
|
||||
# /usr/share/shorewall6/macro.RNDC
|
||||
#
|
||||
# This macro handles RNDC (BIND remote management protocol) traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Rdate Macro
|
||||
# Shorewall6 version 4 - Rdate Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rdate
|
||||
# /usr/share/shorewall6/macro.Rdate
|
||||
#
|
||||
# This macro handles remote time retrieval (rdate).
|
||||
# Unless you are supporting extremely old hardware or software,
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Reject Macro
|
||||
# Shorewall6 version 4 - Reject Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Reject
|
||||
# /usr/share/shorewall6/macro.Reject
|
||||
#
|
||||
# This macro generates the same rules as the Reject default action
|
||||
# It is used in place of action.Reject when USE_ACTIONS=No.
|
||||
|
||||
@ -1,14 +0,0 @@
|
||||
#
|
||||
# Shorewall version 4 - Macro Template
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rfc1918
|
||||
#
|
||||
# This macro handles pkts with a SOURCE or ORIGINAL DEST address reserved by RFC 1918
|
||||
#############################################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
FORMAT 2
|
||||
PARAM SOURCE:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 \
|
||||
DEST - - - - - -
|
||||
PARAM SOURCE DEST - - - 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
|
||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - Rsync Macro
|
||||
# Shorewall6 version 4 - Rsync Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rsync
|
||||
# /usr/share/shorewall6/macro.Rsync
|
||||
#
|
||||
# This macro handles connections to the rsync server.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - SANE Macro
|
||||
# Shorewall6 version 4 - SANE Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SANE
|
||||
# /usr/share/shorewall6/macro.SANE
|
||||
#
|
||||
# This macro handles SANE network scanning.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - SMB Macro
|
||||
# Shorewall6 version 4 - SMB Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMB
|
||||
# /usr/share/shorewall6/macro.SMB
|
||||
#
|
||||
# This macro handles Microsoft SMB traffic. You need to invoke
|
||||
# this macro in both directions. Beware! This rule opens a lot
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - SMB Bi-directional Macro
|
||||
# Shorewall6 version 4 - SMB Bi-directional Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMBBI
|
||||
# /usr/share/shorewall6/macro.SMBBI
|
||||
#
|
||||
# This macro (bidirectional) handles Microsoft SMB traffic.
|
||||
#
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - SMBswat Macro
|
||||
# Shorewall6 version 4 - SMBswat Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMBswat
|
||||
# /usr/share/shorewall6/macro.SMBswat
|
||||
#
|
||||
# This macro handles connections to the Samba Web Administration Tool
|
||||
# (SWAT).
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
#
|
||||
# Shorewall version 4 - SMTP Macro
|
||||
# Shorewall6 version 4 - SMTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMTP
|
||||
# /usr/share/shorewall6/macro.SMTP
|
||||
#
|
||||
# This macro handles plaintext SMTP (email) traffic. For SMTP
|
||||
# encrypted over SSL, use macro.SMTPS. Note that STARTTLS can be
|
||||
|
||||
@ -1,25 +0,0 @@
|
||||
#
|
||||
# Shorewall version 4 - SIXXS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SixXS
|
||||
#
|
||||
# This macro handles SixXS -- An IPv6 Deployment and Tunnel Broker
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
|
||||
# PORT(S) PORT(S) LIMIT GROUP
|
||||
#
|
||||
# Used for retrieving the tunnel information (eg by AICCU)
|
||||
PARAM - - tcp 3874
|
||||
#
|
||||
# Used for signaling where the current IPv4 endpoint
|
||||
# of the tunnel is and that it is alive
|
||||
PARAM - - udp 3740
|
||||
#
|
||||
# Used for tunneling IPv6 over IPv4 (static + heartbeat tunnels)
|
||||
PARAM - - 41
|
||||
#
|
||||
# Used for tunneling IPv6 over IPv4 (AYIYA
|
||||
# tunnels)(5072 is official port, 8374 is used in the beta)
|
||||
PARAM - - udp 5072,8374
|
||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||
Loading…
Reference in New Issue
Block a user