holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Make macro.Reject and macro.Drop use macro.AllowICMPs

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9000 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-12 00:07:26 +00:00
parent cc68c44ec2
commit a8f2da5855
2 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Shorewall6/macro.Drop
View File

@ -18,16 +18,15 @@
# #
REJECT - - tcp 113 REJECT - - tcp 113
# #
# ACCEPT critical ICMP types
#
AllowICMPs
#
# Drop Broadcasts so they don't clutter up the log # Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
# #
dropBcast dropBcast
# #
# ACCEPT critical ICMP types
#
ACCEPT - - icmp fragmentation-needed
ACCEPT - - icmp time-exceeded
#
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be
# rejected). # rejected).

3
Shorewall6/macro.Reject
View File

@ -26,8 +26,7 @@ dropBcast
# #
# ACCEPT critical ICMP types # ACCEPT critical ICMP types
# #
ACCEPT - - icmp fragmentation-needed AllowICMPs
ACCEPT - - icmp time-exceeded
# #
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be