Skip to content

Instantly share code, notes, and snippets.

Created January 9, 2015 21:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/a39bf4d5f6c71fa9bb02 to your computer and use it in GitHub Desktop.
Save anonymous/a39bf4d5f6c71fa9bb02 to your computer and use it in GitHub Desktop.
#dmesg
[1044520.816565] Shorewall:sfilter:DROP:IN=br-guests OUT=br-guests MAC=33:33:ff:00:02:01:f2:ff:ff:ff:01:00:86:dd SRC=2a01:04f8:0151:5146:0000:0000:0000:0100 DST=ff02:0000:0000:0000:0000:0001:ff00:0201 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
[1044520.816674] Shorewall:sfilter:DROP:IN=br-guests OUT=br-guests MAC=33:33:ff:00:02:01:f2:ff:ff:ff:01:00:86:dd SRC=2a01:04f8:0151:5146:0000:0000:0000:0100 DST=ff02:0000:0000:0000:0000:0001:ff00:0201 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0
# zones
#ZONE TYPE OPTIONS
fw firewall
net ipv6
vm ipv6
vpn ipv6
qua ipv6
# interfaces
#ZONE INTERFACE OPTIONS
net eth0
vm br-guests
vpn heimersdorf
qua tun0
# policy
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
all all ACCEPT
# rules
rules
#ACTION SOURCE DEST PROTO DPORT SPORT ODPORT RATE
# SECTION NEW
#ff-Jenkins
HTTP(ACCEPT) net vm:<2a01:4f8:151:5146::204> - - - - s:1/min:3
SSH(ACCEPT) net vm:<2a01:4f8:151:5146::204> - - - - s:1/min:3
REJECT net vm:<2a01:4f8:151:5146::204> tcp,udp - - - -
#Quassel
REJECT net vm:<2a01:4f8:151:5146::100> tcp,udp - - - -
#THW Backuppc
SSH(ACCEPT) net vm:<2a01:4f8:151:5146::203> - - - - s:1/min:3
ACCEPT net vm:<2a01:4f8:151:5146::203> tcp,udp 655 - - -
REJECT net vm:<2a01:4f8:151:5146::203> tcp,udp - - - -
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment