forked from extern/shorewall_code
198207c84c
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1960 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
50 lines
1.6 KiB
Plaintext
50 lines
1.6 KiB
Plaintext
#
|
|
# Shorewall 2.2 /usr/share/shorewall/actions.std
|
|
#
|
|
#
|
|
# Builtin Actions are:
|
|
#
|
|
# allowBcast #Silently Allow Broadcast/multicast
|
|
# dropBcast #Silently Drop Broadcast/multicast
|
|
# dropNotSyn #Silently Drop Non-syn TCP packets
|
|
# rejNotSyn #Silently Reject Non-syn TCP packets
|
|
# dropInvalid #Silently Drop packets that are in the INVALID
|
|
# #conntrack state.
|
|
# allowInvalid #Accept packets that are in the INVALID
|
|
# #conntrack state.
|
|
#
|
|
#ACTION
|
|
|
|
DropSMB #Silently Drops Microsoft SMB Traffic
|
|
RejectSMB #Silently Reject Microsoft SMB Traffic
|
|
DropUPnP #Silently Drop UPnP Probes
|
|
RejectAuth #Silently Reject Auth
|
|
DropPing #Silently Drop Ping
|
|
DropDNSrep #Silently Drop DNS Replies
|
|
|
|
AllowPing #Accept Ping
|
|
AllowFTP #Accept FTP
|
|
AllowDNS #Accept DNS
|
|
AllowSSH #Accept SSH
|
|
AllowWeb #Allow Web Browsing
|
|
AllowSMB #Allow MS Networking
|
|
AllowAuth #Allow Auth (identd)
|
|
AllowSMTP #Allow SMTP (Email)
|
|
AllowPOP3 #Allow reading mail via POP3
|
|
AllowICMPs #Allows critical ICMP types
|
|
AllowIMAP #Allow reading mail via IMAP
|
|
AllowTelnet #Allow Telnet Access (not recommended for use over the
|
|
#Internet)
|
|
AllowVNC #Allow VNC viewer->server, Displays 0-9
|
|
AllowVNCL #Allow VNC server->viewer in listening mode
|
|
AllowNTP #Allow Network Time Protocol (ntpd)
|
|
AllowRdate #Allow remote time (rdate).
|
|
AllowNNTP #Allow network news (Usenet).
|
|
AllowTrcrt #Allows Traceroute (20 hops)
|
|
AllowSNMP #Allows SNMP (including traps)
|
|
AllowPCA #Allows PCAnywhere (tm)
|
|
|
|
Drop:DROP #Common Action for DROP policy
|
|
Reject:REJECT #Common Action for REJECT policy
|
|
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|