From e17f22e85d29aed7fe50b751c7d73949f11f9555 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Thu, 9 Mar 2017 13:16:52 -0800 Subject: [PATCH] Remove Multicast from the shorewall6.conf samples Signed-off-by: Tom Eastep --- docs/Actions.xml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docs/Actions.xml b/docs/Actions.xml index b08d4f3a2..db668d567 100644 --- a/docs/Actions.xml +++ b/docs/Actions.xml @@ -351,8 +351,8 @@ ACCEPT - - tcp 135,139,445 - The recommended settings for the 6 policy actions for IPv4 are: - + The recommended settings for the 6 policy actions for IPv4 + are: ACCEPT_DEFAULT=none BLACKLIST_DEFAULT="Broadcast(DROP),Multicast(DROP),dropNotSyn:$LOG_LEVEL,dropInvalid:$LOG_LEVEL,DropDNSrep:$LOG_LEVEL" @@ -365,11 +365,11 @@ ACCEPT - - tcp 135,139,445 The recommended settings for IPv6 are: ACCEPT_DEFAULT=none - BLACKLIST_DEFAULT="AllowICMPs,Broadcast(DROP),Multicast(DROP),dropNotSyn:$LOG_LEVEL,DropDNSrep:$LOG_LEVEL" - DROP_DEFAULT="AllowICMPs,Broadcast(DROP),Multicast(DROP)" + BLACKLIST_DEFAULT="AllowICMPs,Broadcast(DROP),dropNotSyn:$LOG_LEVEL,DropDNSrep:$LOG_LEVEL" + DROP_DEFAULT="AllowICMPs,Broadcast(DROP)" NFQUEUE_DEFAULT=none QUEUE_DEFAULT=none - REJECT_DEFAULT="AllowICMPs,Broadcast(DROP),Multicast(DROP)" + REJECT_DEFAULT="AllowICMPs,Broadcast(DROP)" Note that in both cases, logging occurs based on the setting of