holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Change samples to DROP ping rather than REJECT

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8498 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-05-17 00:15:26 +00:00
parent 44472dd288
commit f1a1c7cd3a
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Samples/one-interface/rules
View File

@ -1,4 +1,4 @@
# L#
# Shorewall version 4.0 - Sample Rules File for one-interface configuration. # Shorewall version 4.0 - Sample Rules File for one-interface configuration.
# Copyright (C) 2006 by the Shorewall Team # Copyright (C) 2006 by the Shorewall Team
# #
@ -17,9 +17,9 @@
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK
# PORT PORT(S) DEST LIMIT GROUP # PORT PORT(S) DEST LIMIT GROUP
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. # Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
Ping/REJECT net $FW Ping/DROP net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone # Permit all ICMP traffic FROM the firewall TO the net zone

4
Samples/three-interfaces/rules
View File

@ -32,9 +32,9 @@ SSH/ACCEPT loc dmz
DNS/ACCEPT dmz net DNS/ACCEPT dmz net
# Reject Ping from the "bad" net zone. # Drop Ping from the "bad" net zone.
Ping/REJECT net $FW Ping/DROP net $FW
# #
# Make ping work bi-directionally between the dmz, net, Firewall and local zone # Make ping work bi-directionally between the dmz, net, Firewall and local zone

4
Samples/two-interfaces/rules
View File

@ -30,10 +30,10 @@ SSH/ACCEPT loc $FW
Ping/ACCEPT loc $FW Ping/ACCEPT loc $FW
# #
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. # Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
# #
Ping/REJECT net $FW Ping/DROP net $FW
ACCEPT $FW loc icmp ACCEPT $FW loc icmp
ACCEPT $FW net icmp ACCEPT $FW net icmp