On 05/24/2011 07:06 AM, Tom Eastep wrote: > On 05/24/2011 04:43 AM, Mr Dash Four wrote:
> So I spent 11 minutes and created them myself. Guess I should have spent 12 minutes -- corrected action.ADrop attached. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
# # Shorewall version 4 - Drop Action # # /usr/share/shorewall/action.Drop # # The default DROP common rules # # This action is invoked before a DROP policy is enforced. The purpose # of the action is: # # a) Avoid logging lots of useless cruft. # b) Ensure that 'auth' requests are rejected, even if the policy is # DROP. Otherwise, you may experience problems establishing # connections with servers that use auth. # c) Ensure that certain ICMP packets that are necessary for successful # internet operation are always ACCEPTed. # # IF YOU ARE HAVING CONNECTION PROBLEMS, CHANGING THIS FILE WON'T HELP!!!!!!!!! # ############################################################################### #TARGET SOURCE DEST PROTO DPORT SPORT # # Count packets that come through here # COUNT # # Reject 'auth' # Auth(A_REJECT) # # Don't log broadcasts # dropBcast(audit) # # ACCEPT critical ICMP types # AAllowICMPs - - icmp # # Drop packets that are in the INVALID state -- these are usually ICMP packets # and just confuse people when they appear in the log. # dropInvalid(audit) # # Drop Microsoft noise so that it doesn't clutter up the log. # SMB(A_DROP) ADropUPnP # # Drop 'newnotsyn' traffic so that it doesn't get logged. # dropNotSyn(audit) - - tcp # # Drop late-arriving DNS replies. These are just a nuisance and clutter up # the log. # ADropDNSrep
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ vRanger cuts backup time in half-while increasing security. With the market-leading solution for virtual backup and recovery, you get blazing-fast, flexible, and affordable data protection. Download your free trial now. http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
