dockerfiles/shorewall/etc/rules
Jessica Frazelle ae2529386d updates for shorewall configs
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-07-28 04:13:26 -07:00

24 lines
955 B
Plaintext

#
# Shorewall version 4 - Rules File
#
# For information on the settings in this file, type "man shorewall-rules"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-rules.html
#
######################################################################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME HEADERS SWITCH HELPER
# PORT PORT(S)DEST LIMIT GROUP
?SECTION ALL
?SECTION ESTABLISHED
?SECTION RELATED
?SECTION INVALID
?SECTION UNTRACKED
?SECTION NEW
Invalid(DROP) net $FW tcp
Invalid(DROP) net dock tcp
Invalid(DROP) net dock udp
#SSH(ACCEPT) net $FW
# on a server you would obviously want to accept here
#Ping(ACCEPT) net $FW