diff --git a/Samples/one-interface/rules b/Samples/one-interface/rules index 8b1bfbf93..a3ac5175e 100644 --- a/Samples/one-interface/rules +++ b/Samples/one-interface/rules @@ -1,4 +1,4 @@ -# +L# # Shorewall version 4.0 - Sample Rules File for one-interface configuration. # Copyright (C) 2006 by the Shorewall Team # @@ -17,9 +17,9 @@ #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK # PORT PORT(S) DEST LIMIT GROUP -# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. +# Drop Ping from the "bad" net zone.. and prevent your log from being flooded.. -Ping/REJECT net $FW +Ping/DROP net $FW # Permit all ICMP traffic FROM the firewall TO the net zone diff --git a/Samples/three-interfaces/rules b/Samples/three-interfaces/rules index e626e2d1b..59b47523e 100644 --- a/Samples/three-interfaces/rules +++ b/Samples/three-interfaces/rules @@ -32,9 +32,9 @@ SSH/ACCEPT loc dmz DNS/ACCEPT dmz net -# Reject Ping from the "bad" net zone. +# Drop Ping from the "bad" net zone. -Ping/REJECT net $FW +Ping/DROP net $FW # # Make ping work bi-directionally between the dmz, net, Firewall and local zone diff --git a/Samples/two-interfaces/rules b/Samples/two-interfaces/rules index 4a26c523d..d922c14f6 100644 --- a/Samples/two-interfaces/rules +++ b/Samples/two-interfaces/rules @@ -30,10 +30,10 @@ SSH/ACCEPT loc $FW Ping/ACCEPT loc $FW # -# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. +# Drop Ping from the "bad" net zone.. and prevent your log from being flooded.. # -Ping/REJECT net $FW +Ping/DROP net $FW ACCEPT $FW loc icmp ACCEPT $FW net icmp