forked from extern/shorewall_code
Compare commits
81 Commits
5.0.0-Beta
...
5.0.2-Beta
Author | SHA1 | Date | |
---|---|---|---|
|
514fe76fa5 | ||
|
6e7fc9bee4 | ||
|
56bf8b1572 | ||
|
2a064c7b7c | ||
|
30682e63d8 | ||
|
69dd7ce0b9 | ||
|
39f6c4e74c | ||
|
46c3db4f32 | ||
|
6e59fd5395 | ||
|
1e2cfcd9a3 | ||
|
87d94ae004 | ||
|
8dc16268a7 | ||
|
8771041a63 | ||
|
dc7082b7a1 | ||
|
a8e4671668 | ||
|
7388ff5154 | ||
|
0dbe756e93 | ||
|
72d4637c22 | ||
|
bb538a7c10 | ||
|
1db3bfb53e | ||
|
97e821d12d | ||
|
ec2f4362f3 | ||
|
dc79a74de5 | ||
|
af18896851 | ||
|
35f33b325f | ||
|
89122c0d55 | ||
|
0385b2cd37 | ||
|
fed6e7c352 | ||
|
141440147c | ||
|
f1d4ef495e | ||
|
7dd9beeeae | ||
|
85e44c70eb | ||
|
03d99de8d5 | ||
|
426636458c | ||
|
0aa5cb5086 | ||
|
eddd58d459 | ||
|
1bf13e5fda | ||
|
682a449e7b | ||
|
9e98d30c92 | ||
|
582755edf4 | ||
|
dea1f853ea | ||
|
e15a6f452e | ||
|
656eaabce9 | ||
|
f42dc6def1 | ||
|
6e303aef69 | ||
|
ab260dc5b1 | ||
|
55ab498291 | ||
|
10cda4cee7 | ||
|
de74273dbb | ||
|
af1e2f6c8b | ||
|
dc2406d25b | ||
|
e0734a45ee | ||
|
28df894add | ||
|
1d8873d3d5 | ||
|
ad06ec3eef | ||
|
eae492cef5 | ||
|
05f9f926c4 | ||
|
a709395949 | ||
|
7956c5f6e0 | ||
|
4b003163d6 | ||
|
67aef659b5 | ||
|
39982c20c4 | ||
|
2b1f33c391 | ||
|
1c33717cf5 | ||
|
cd8fe38c85 | ||
|
d525419c65 | ||
|
0e67357d63 | ||
|
537f53f611 | ||
|
3b1ad1e284 | ||
|
9d3f35a22d | ||
|
7c2a969de0 | ||
|
8bdea65325 | ||
|
fd46c0ffed | ||
|
60acddbb37 | ||
|
306dc34b31 | ||
|
f5c6a6fe82 | ||
|
af2b7910bd | ||
|
3b59e46799 | ||
|
955a2e38b7 | ||
|
4c4c5a436a | ||
|
d949824f94 |
@@ -3590,7 +3590,13 @@ get_config() {
|
||||
VERBOSITY=2
|
||||
fi
|
||||
|
||||
g_hostname=$(hostname 2> /dev/null)
|
||||
if qt mywhich hostname; then
|
||||
g_hostname=$(hostname 2> /dev/null)
|
||||
elif qt mywhich uname; then
|
||||
g_hostname=$(uname -n 2> /dev/null)
|
||||
else
|
||||
g_hostname=localhost
|
||||
fi
|
||||
|
||||
if [ -n "$IPSET" ]; then
|
||||
case "$IPSET" in
|
||||
|
@@ -16,4 +16,4 @@ ExecStart=/sbin/shorewall-init start
|
||||
ExecStop=/sbin/shorewall-init stop
|
||||
|
||||
[Install]
|
||||
WantedBy=network-pre.target
|
||||
WantedBy=basic.target
|
||||
|
@@ -2,6 +2,7 @@
|
||||
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall
|
||||
#
|
||||
# Copyright 2011 Jonathan Underwood <jonathan.underwood@gmail.com>
|
||||
# Copyright 2015 Tom Eastep <teastep@shorewall.net>
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall firewall (bootup security)
|
||||
@@ -15,3 +16,6 @@ EnvironmentFile=-/etc/default/shorewall-init
|
||||
StandardOutput=syslog
|
||||
ExecStart=/sbin/shorewall-init start
|
||||
ExecStop=/sbin/shorewall-init stop
|
||||
|
||||
[Install]
|
||||
WantedBy=basic.target
|
||||
|
@@ -2,6 +2,7 @@
|
||||
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall
|
||||
#
|
||||
# Copyright 2011 Jonathan Underwood <jonathan.underwood@gmail.com>
|
||||
# Copyright 2015 Tom Eastep <teastep@shorewall.net>
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall firewall (bootup security)
|
||||
|
@@ -2,6 +2,7 @@
|
||||
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall
|
||||
#
|
||||
# Copyright 2011 Jonathan Underwood <jonathan.underwood@gmail.com>
|
||||
# Copyright 2015 Tom Eastep <teastep@shorewall.net>
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv4 firewall (lite)
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - AMQP Macro
|
||||
# Shorewall - AMQP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.AMQP
|
||||
#
|
||||
# This macro handles AMQP traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5672
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Audited AllowICMPs Macro
|
||||
# Shorewall - Audited AllowICMPs Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.A_AllowICMPs
|
||||
#
|
||||
# This macro A_ACCEPTs needed ICMP types
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Audited DropDNSrep Macro
|
||||
# Shorewall - Audited DropDNSrep Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.A_DropDNSrep
|
||||
#
|
||||
# This macro silently audites and drops DNS UDP replies
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - ADropUPnP Macro
|
||||
# Shorewall - ADropUPnP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.A_DropUPnP
|
||||
#
|
||||
# This macro silently drops UPnP probes on UDP port 1900
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Samba 4 Macro
|
||||
# Shorewall - Samba 4 Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.ActiveDir
|
||||
#
|
||||
@@ -9,8 +9,6 @@
|
||||
#
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 389 #LDAP services
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - AllowICMPs Macro
|
||||
# Shorewall - AllowICMPs Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.AllowICMPs
|
||||
#
|
||||
# This macro ACCEPTs needed ICMP types
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Amanda Macro
|
||||
# Shorewall - Amanda Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Amanda
|
||||
#
|
||||
@@ -8,8 +8,6 @@
|
||||
# files from those nodes.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Auth Macro
|
||||
# Shorewall - Auth Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Auth
|
||||
#
|
||||
# This macro handles Auth (identd) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 113
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - BGP Macro
|
||||
# Shorewall - BGP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.BGP
|
||||
#
|
||||
# This macro handles BGP4 traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 179 # BGP4
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - blacklist Macro
|
||||
# Shorewall - blacklist Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.blacklist
|
||||
#
|
||||
# This macro handles blacklisting using BLACKLIST_DISPOSITION and BLACKLIST_LOGLEVEL
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
?if $BLACKLIST_LOGLEVEL
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - BitTorrent Macro
|
||||
# Shorewall - BitTorrent Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.BitTorrent
|
||||
#
|
||||
@@ -9,8 +9,6 @@
|
||||
# BitTorrent32 macro.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 6881:6889
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - BitTorrent 3.2 Macro
|
||||
# Shorewall - BitTorrent 3.2 Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.BitTorrent32
|
||||
#
|
||||
# This macro handles BitTorrent traffic for BitTorrent 3.2 and later.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 6881:6999
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - CVS Macro
|
||||
# Shorewall - CVS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.CVS
|
||||
#
|
||||
# This macro handles connections to the CVS pserver.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 2401
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Citrix/ICA Macro
|
||||
# Shorewall - Citrix/ICA Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Citrix
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# ICA Session Reliability)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 1494 # ICA
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - DAAP Macro
|
||||
# Shorewall - DAAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DAAP
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# The protocol is used by iTunes, Rythmbox and other similar daemons.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 3689
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - DCC Macro
|
||||
# Shorewall - DCC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DCC
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# DCC is a distributed spam filtering mechanism.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 6277
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - DHCPfwd Macro
|
||||
# Shorewall - DHCPfwd Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DHCPfwd
|
||||
#
|
||||
# This macro (bidirectional) handles forwarded DHCP traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 67:68 67:68 # DHCP
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - DNS Macro
|
||||
# Shorewall - DNS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DNS
|
||||
#
|
||||
# This macro handles DNS traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 53
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Distcc Macro
|
||||
# Shorewall - Distcc Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Distcc
|
||||
#
|
||||
# This macro handles connections to the Distributed Compiler service.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 3632
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Drop Macro
|
||||
# Shorewall - Drop Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Drop
|
||||
#
|
||||
@@ -11,8 +11,6 @@
|
||||
# Drop net all
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
#
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - DropDNSrep Macro
|
||||
# Shorewall - DropDNSrep Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DropDNSrep
|
||||
#
|
||||
# This macro silently drops DNS UDP replies
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - DropUPnP Macro
|
||||
# Shorewall - DropUPnP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.DropUPnP
|
||||
#
|
||||
# This macro silently drops UPnP probes on UDP port 1900
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Edonkey Macro
|
||||
# Shorewall - Edonkey Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Edonkey
|
||||
#
|
||||
@@ -28,8 +28,6 @@
|
||||
# applications such as aMule WebServer or aMuleCMD.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 4662
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - FTP Macro
|
||||
# Shorewall - FTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.FTP
|
||||
#
|
||||
# This macro handles FTP traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
?if ( __CT_TARGET && ! $AUTOHELPERS && __FTP_HELPER )
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Finger Macro
|
||||
# Shorewall - Finger Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Finger
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# your finger information to internet.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 79
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - GNUnet Macro
|
||||
# Shorewall - GNUnet Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.GNUnet
|
||||
#
|
||||
# This macro handles GNUnet (secure peer-to-peer networking) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 2086
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - GRE Macro
|
||||
# Shorewall - GRE Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.GRE
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# traffic (RFC 1701)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - 47 # GRE
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Git Macro
|
||||
# Shorewall - Git Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Git
|
||||
#
|
||||
# This macro handles Git traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 9418
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Gnutella Macro
|
||||
# Shorewall - Gnutella Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Gnutella
|
||||
#
|
||||
# This macro handles Gnutella traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 6346
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Citrix/Goto Meeting macro
|
||||
# Shorewall - Citrix/Goto Meeting macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Goto-Meeting
|
||||
# by Eric Teeter
|
||||
@@ -7,8 +7,6 @@
|
||||
# Assumes that ports 80 and 443 are already open
|
||||
# If needed, use the macros that open Http and Https to reduce redundancy
|
||||
####################################################################################
|
||||
?FORMAT 2
|
||||
####################################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 8200 # Goto Meeting only needed (TCP outbound)
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - HKP Macro
|
||||
# Shorewall - HKP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.HKP
|
||||
#
|
||||
# This macro handles OpenPGP HTTP keyserver protocol traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 11371
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - HTTP Macro
|
||||
# Shorewall - HTTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.HTTP
|
||||
#
|
||||
# This macro handles plaintext HTTP (WWW) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 80
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - HTTPS Macro
|
||||
# Shorewall - HTTPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.HTTPS
|
||||
#
|
||||
# This macro handles HTTPS (WWW over SSL) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 443
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - ICPV2 Macro
|
||||
# Shorewall - ICPV2 Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.ICPV2
|
||||
#
|
||||
# This macro handles Internet Cache Protocol V2 (Squid) traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 3130
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - ICQ Macro
|
||||
# Shorewall - ICQ Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.ICQ
|
||||
#
|
||||
# This macro handles ICQ, now called AOL Instant Messenger (or AIM).
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5190
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - ILO Macro
|
||||
# Shorewall - ILO Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.ILO
|
||||
#
|
||||
@@ -8,8 +8,6 @@
|
||||
# workstations.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 3002 # Raw serial data
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IMAP Macro
|
||||
# Shorewall - IMAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IMAP
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# see macro.IMAPS.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 143
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IMAPS Macro
|
||||
# Shorewall - IMAPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IMAPS
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# (not recommended), see macro.IMAP.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 993
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - IPIP Macro
|
||||
# Shorewall - IPIP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPIP
|
||||
#
|
||||
# This macro (bidirectional) handles IPIP capsulation traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - 94 # IPIP
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IPMI Macro
|
||||
# Shorewall - IPMI Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPMI
|
||||
#
|
||||
@@ -9,8 +9,6 @@
|
||||
# workstations.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 623 # RMCP
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 3.2 - IPP Macro
|
||||
# Shorewall - IPP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPP
|
||||
#
|
||||
# This macro handles Internet Printing Protocol (IPP).
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 631
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IPP Broadcast Macro
|
||||
# Shorewall - IPP Broadcast Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPPbrd
|
||||
#
|
||||
@@ -8,8 +8,6 @@
|
||||
# direction, use the IPPserver Macro
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 631
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IPPserver Macro
|
||||
# Shorewall - IPPserver Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPPserver
|
||||
#
|
||||
@@ -23,8 +23,6 @@
|
||||
# IPPserver/ACCEPT $FW loc
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM SOURCE DEST tcp 631
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - IPsec Macro
|
||||
# Shorewall - IPsec Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsec
|
||||
#
|
||||
# This macro (bidirectional) handles IPsec traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 500 500 # IKE
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - IPsecah Macro
|
||||
# Shorewall - IPsecah Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsecah
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# This is insecure. You should use ESP with encryption for security.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 500 500 # IKE
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - IPsecnat Macro
|
||||
# Shorewall - IPsecnat Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IPsecnat
|
||||
#
|
||||
# This macro (bidirectional) handles IPsec traffic and Nat-Traversal
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 500 # IKE
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 IRC Macro
|
||||
# Shorewall IRC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.IRC
|
||||
#
|
||||
# This macro handles IRC traffic (Internet Relay Chat).
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - JAP Macro
|
||||
# Shorewall - JAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JAP
|
||||
#
|
||||
@@ -8,8 +8,6 @@
|
||||
# to browse anonymously!
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 8080 # HTTP port
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Jabber Macro
|
||||
# Shorewall - Jabber Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Jabber
|
||||
#
|
||||
# This macro accepts Jabber traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5222
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - JabberPlain Macro
|
||||
# Shorewall - JabberPlain Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JabberPlain
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# deprecated - use of macro.Jabber instead is recommended.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
Jabber
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - JabberSecure (SSL) Macro
|
||||
# Shorewall - JabberSecure (SSL) Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.JabberSecure
|
||||
#
|
||||
@@ -8,8 +8,6 @@
|
||||
# Jabber macro instead.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5223
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 3.4 - Jabberd (server intercommunication)
|
||||
# Shorewall - Jabberd (server intercommunication)
|
||||
#
|
||||
# /usr/share/shorewall/macro.Jabberd
|
||||
#
|
||||
# This macro accepts Jabberd intercommunication traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5269
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 3.2 - Jetdirect Macro
|
||||
# Shorewall - Jetdirect Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Jetdirect
|
||||
#
|
||||
# This macro handles HP Jetdirect printing.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 9100
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Kerberos Macro
|
||||
# Shorewall - Kerberos Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Kerberos
|
||||
#
|
||||
# This macro handles Kerberos traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 88
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - L2TP Macro
|
||||
# Shorewall - L2TP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.L2TP
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# (RFC 2661)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 1701 # L2TP
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - LDAP Macro
|
||||
# Shorewall - LDAP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.LDAP
|
||||
#
|
||||
@@ -11,8 +11,6 @@
|
||||
# Consult your LDAP server documentation for details.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 389
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - LDAPS Macro
|
||||
# Shorewall - LDAPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.LDAPS
|
||||
#
|
||||
@@ -11,8 +11,6 @@
|
||||
# Consult your LDAP server documentation for details.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 636
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - MSNP Macro
|
||||
# Shorewall - MSNP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.MSNP
|
||||
#
|
||||
# This macro handles MSNP (MicroSoft Notification Protocol)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 1863
|
||||
|
@@ -1,13 +1,12 @@
|
||||
#
|
||||
# Shorewall version 5 - MSSQL Macro
|
||||
# Shorewall - MSSQL Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.MSSQL
|
||||
#
|
||||
# This macro handles MSSQL (Microsoft SQL Server)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 1433
|
||||
PARAM - - udp 1434
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Mail Macro
|
||||
# Shorewall - Mail Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Mail
|
||||
#
|
||||
@@ -12,8 +12,6 @@
|
||||
# the POP3 or IMAP macros.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 25
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - MongoDB Macro
|
||||
# Shorewall - MongoDB Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.MongoDB
|
||||
#
|
||||
# This macro handles MongoDB Daemon/Router traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 27017
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Munin Macro
|
||||
# Shorewall - Munin Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Munin
|
||||
#
|
||||
# This macro handles Munin networked resource monitoring traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 4949
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - MySQL Macro
|
||||
# Shorewall - MySQL Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.MySQL
|
||||
#
|
||||
# This macro handles connections to the MySQL server.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 3306
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 NNTP Macro
|
||||
# Shorewall NNTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NNTP
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# encrypted NNTP, see macro.NNTPS.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 119
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 NNTPS Macro
|
||||
# Shorewall NNTPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NNTPS
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# plaintext NNTP, see macro.NNTP.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 563
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - NTP Macro
|
||||
# Shorewall - NTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NTP
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# For broadcast NTP traffic, use NTPbrd Macro.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 123
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - NTPbi Macro
|
||||
# Shorewall - NTPbi Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NTPbi
|
||||
#
|
||||
# This macro handles bi-directional NTP (for NTP peers)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 123
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - NTPbrd Macro
|
||||
# Shorewall - NTPbrd Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.NTPbrd
|
||||
#
|
||||
@@ -11,8 +11,6 @@
|
||||
# Netfilter doesn't track connections for broadcast traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 123
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - OSPF Macro
|
||||
# Shorewall - OSPF Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.OSPF
|
||||
#
|
||||
# This macro handles OSPF multicast traffic
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - 89 # OSPF
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - OpenVPN Macro
|
||||
# Shorewall - OpenVPN Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.OpenVPN Macro
|
||||
#
|
||||
# This macro handles OpenVPN traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 1194
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - PCA Macro
|
||||
# Shorewall - PCA Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PCA
|
||||
#
|
||||
# This macro handles PCAnywere (tm)
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 5632
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - POP3 Macro
|
||||
# Shorewall - POP3 Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.POP3
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# see macro.POP3S.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 110
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - POP3S Macro
|
||||
# Shorewall - POP3S Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.POP3S
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# see macro.POP3.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 995 # Secure POP3
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - PPTP Macro
|
||||
# Shorewall - PPTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PPtP Macro
|
||||
#
|
||||
# This macro handles PPTP traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - 47
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Ping Macro
|
||||
# Shorewall - Ping Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Ping
|
||||
#
|
||||
# This macro handles 'ping' requests.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - icmp 8
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - PostgreSQL Macro
|
||||
# Shorewall - PostgreSQL Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.PostgreSQL
|
||||
#
|
||||
# This macro handles connections to the PostgreSQL server.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 5432
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 3.2 - Printer Macro
|
||||
# Shorewall - Printer Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Printer
|
||||
#
|
||||
# This macro handles Line Printer protocol printing.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 515
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Puppet Macro
|
||||
# Shorewall - Puppet Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Puppet
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# management system.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 8140
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - QUIC Macro
|
||||
# Shorewall - QUIC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.QUIC
|
||||
#
|
||||
# This macro handles QUIC (Quick UDP Internet Connections).
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 80,443
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 3.2 - RDP Macro
|
||||
# Shorewall - RDP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.RDP
|
||||
#
|
||||
# This macro handles Microsoft RDP (Remote Desktop) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 3389
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - RIPbi Macro
|
||||
# Shorewall - RIPbi Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.RIPbi
|
||||
#
|
||||
# This macro handles RIP (Routing Information Protocol) - bidirectional
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 520
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - RNDC Macro
|
||||
# Shorewall - RNDC Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.RNDC
|
||||
#
|
||||
# This macro handles RNDC (BIND remote management protocol) traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 953
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Razor Macro
|
||||
# Shorewall - Razor Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Razor
|
||||
#
|
||||
# This macro handles traffic for the Razor Antispam System
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
ACCEPT - - tcp 2703
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Rdate Macro
|
||||
# Shorewall - Rdate Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rdate
|
||||
#
|
||||
@@ -10,8 +10,6 @@
|
||||
# use Time macro instead.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 37
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Redis Macro
|
||||
# Shorewall - Redis Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Redis
|
||||
#
|
||||
# This macro handles Redis traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 6379
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Reject Macro
|
||||
# Shorewall - Reject Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Reject
|
||||
#
|
||||
@@ -12,8 +12,6 @@
|
||||
#
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
#
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - Macro Template
|
||||
# Shorewall - Macro Template
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rfc1918
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# reserved by RFC 1918
|
||||
#
|
||||
#############################################################################################
|
||||
?FORMAT 2
|
||||
#############################################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM SOURCE:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 \
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - Rsync Macro
|
||||
# Shorewall - Rsync Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.Rsync
|
||||
#
|
||||
# This macro handles connections to the rsync server.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 873
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - SANE Macro
|
||||
# Shorewall - SANE Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SANE
|
||||
#
|
||||
# This macro handles SANE network scanning.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,13 +1,11 @@
|
||||
#
|
||||
# Shorewall version 5 - SIP Macro
|
||||
# Shorewall - SIP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SIP
|
||||
#
|
||||
# This macro handles SIP traffic.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - SMB Macro
|
||||
# Shorewall - SMB Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMB
|
||||
#
|
||||
@@ -10,8 +10,6 @@
|
||||
# between hosts you fully trust.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 135,445
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - SMB Bi-directional Macro
|
||||
# Shorewall - SMB Bi-directional Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMBBI
|
||||
#
|
||||
@@ -10,8 +10,6 @@
|
||||
# allow SMB traffic between hosts you fully trust.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - udp 135,445
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - SMBswat Macro
|
||||
# Shorewall - SMBswat Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMBswat
|
||||
#
|
||||
@@ -7,8 +7,6 @@
|
||||
# (SWAT).
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 901
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - SMTP Macro
|
||||
# Shorewall - SMTP Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMTP
|
||||
#
|
||||
@@ -14,8 +14,6 @@
|
||||
# the POP3 or IMAP macros.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 25
|
||||
|
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall version 5 - SMTPS Macro
|
||||
# Shorewall - SMTPS Macro
|
||||
#
|
||||
# /usr/share/shorewall/macro.SMTPS
|
||||
#
|
||||
@@ -11,8 +11,6 @@
|
||||
# the POP3(S) or IMAP(S) macros.
|
||||
#
|
||||
###############################################################################
|
||||
?FORMAT 2
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
||||
# PORT(S) PORT(S) DEST LIMIT GROUP
|
||||
PARAM - - tcp 465
|
||||
|
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user