[Shorewall-users] Shorewall 5.0.15 RC 1

2016-11-27 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Shorewall 5.0.15 RC 1 is now available for testing. New Features since Beta 1: 1) The 'show macro' command now uses the configured PAGER, if any. 2) The PAGER may now be deactivated through use of the '-p' option (e.g., "shorewall -p show"

Re: [Shorewall-users] blacklist if connection attempt on unused port

2016-11-27 Thread Mark D. Montgomery II
Quoting Vieri Di Paola : Hi, Suppose I have rules such as: ACCEPT net $FW tcp 80,443 DNAT net loc:IP tcp 3389 [...etc...] I'd like to automatically/dynamically blacklist all IP addresses of hosts that try to connect to any other unlisted port (eg. port tcp

Re: [Shorewall-users] blacklist if connection attempt on unused port

2016-11-27 Thread Tom Eastep
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/25/2016 07:12 AM, Vieri Di Paola wrote: > Hi, > > Suppose I have rules such as: > > ACCEPT net $FW tcp 80,443 DNAT net loc:IP tcp 3389 [...etc...] > > I'd like to automatically/dynamically blacklist all IP addresses of > hosts that try to