forked from extern/shorewall_code
All Shorewall config files except shorewall.conf are now empty
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1493 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
7ae14b0e6a
commit
c17a49ff86
@ -33,3 +33,5 @@ Changes since 2.0.3
|
|||||||
firewall
|
firewall
|
||||||
|
|
||||||
10) Port "shorewall status" changes from 2.0.7.
|
10) Port "shorewall status" changes from 2.0.7.
|
||||||
|
|
||||||
|
11) All config files are now empty.
|
@ -2823,7 +2823,7 @@ find_logactionchain() # $1 = Action Name, $2 = Log Level
|
|||||||
}
|
}
|
||||||
|
|
||||||
#
|
#
|
||||||
# Read /etc/shorewall/actions and for each defined <action>, pre-process
|
# Read /etc/shorewall/actions and /usr/share/shorewall/actions.std and for each defined <action>, pre-process
|
||||||
# /etc/shorewall/action.<action>
|
# /etc/shorewall/action.<action>
|
||||||
#
|
#
|
||||||
|
|
||||||
@ -2941,7 +2941,6 @@ process_actions2() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
process_action $xaction $xtarget $xclients $xservers $xprotocol $xports $xcports $xratelimit $xuserspec
|
process_action $xaction $xtarget $xclients $xservers $xprotocol $xports $xcports $xratelimit $xuserspec
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
log_action() {
|
log_action() {
|
||||||
|
@ -76,10 +76,4 @@
|
|||||||
###############################################################################
|
###############################################################################
|
||||||
#SOURCE DEST POLICY LOG LIMIT:BURST
|
#SOURCE DEST POLICY LOG LIMIT:BURST
|
||||||
# LEVEL
|
# LEVEL
|
||||||
loc net ACCEPT
|
|
||||||
net all DROP info
|
|
||||||
#
|
|
||||||
# THE FOLLOWING POLICY MUST BE LAST
|
|
||||||
#
|
|
||||||
all all REJECT info
|
|
||||||
#LAST LINE -- DO NOT REMOVE
|
#LAST LINE -- DO NOT REMOVE
|
||||||
|
@ -64,4 +64,10 @@ New Features:
|
|||||||
you to override the setting of ADD_IP_ALIASES=Yes by following the
|
you to override the setting of ADD_IP_ALIASES=Yes by following the
|
||||||
interface name with ":" but no digit.
|
interface name with ":" but no digit.
|
||||||
|
|
||||||
|
4) All configuration files in the Shorewall distribution are now
|
||||||
|
empty. In particular, the /etc/shorewall/zones,
|
||||||
|
/etc/shorewall/policy and /etc/shorewall/tos files now have no
|
||||||
|
active entries. Hopefully this will stop the questions on the
|
||||||
|
support and development lists regarding why the default entries
|
||||||
|
are the way they are.
|
||||||
|
|
||||||
|
@ -43,10 +43,4 @@
|
|||||||
#
|
#
|
||||||
##############################################################################
|
##############################################################################
|
||||||
#SOURCE DEST PROTOCOL SOURCE PORTS DEST PORTS TOS
|
#SOURCE DEST PROTOCOL SOURCE PORTS DEST PORTS TOS
|
||||||
all all tcp - ssh 16
|
|
||||||
all all tcp ssh - 16
|
|
||||||
all all tcp - ftp 16
|
|
||||||
all all tcp ftp - 16
|
|
||||||
all all tcp ftp-data - 8
|
|
||||||
all all tcp - ftp-data 8
|
|
||||||
#LAST LINE -- Add your entries above -- DO NOT REMOVE
|
#LAST LINE -- Add your entries above -- DO NOT REMOVE
|
||||||
|
@ -13,7 +13,4 @@
|
|||||||
# See http://www.shorewall.net/Documentation.htm#Nested
|
# See http://www.shorewall.net/Documentation.htm#Nested
|
||||||
#
|
#
|
||||||
#ZONE DISPLAY COMMENTS
|
#ZONE DISPLAY COMMENTS
|
||||||
net Net Internet
|
|
||||||
loc Local Local networks
|
|
||||||
dmz DMZ Demilitarized zone
|
|
||||||
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|
||||||
|
Loading…
Reference in New Issue
Block a user