~ubuntu-branches/debian/squeeze/shorewall/squeeze

« back to all changes in this revision

Viewing changes to manpages/shorewall-blacklist.5

  • Committer: Bazaar Package Importer
  • Author(s): Roberto C. Sanchez
  • Date: 2010-07-14 19:58:19 UTC
  • mfrom: (1.3.6 upstream)
  • Revision ID: james.westby@ubuntu.com-20100714195819-at1n1yi85rcv8f13
Tags: 4.4.11-1
New Upstream Version

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
'\" t
1
2
.\"     Title: shorewall-blacklist
2
 
.\"    Author: 
3
 
.\" Generator: DocBook XSL Stylesheets v1.73.2 <http://docbook.sf.net/>
4
 
.\"      Date: 07/05/2010
5
 
.\"    Manual: 
6
 
.\"    Source: 
 
3
.\"    Author: [FIXME: author] [see http://docbook.sf.net/el/author]
 
4
.\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
 
5
.\"      Date: 07/14/2010
 
6
.\"    Manual: [FIXME: manual]
 
7
.\"    Source: [FIXME: source]
 
8
.\"  Language: English
7
9
.\"
8
 
.TH "SHOREWALL\-BLACKLIST" "5" "07/05/2010" "" ""
 
10
.TH "SHOREWALL\-BLACKLIST" "5" "07/14/2010" "[FIXME: source]" "[FIXME: manual]"
 
11
.\" -----------------------------------------------------------------
 
12
.\" * set default formatting
 
13
.\" -----------------------------------------------------------------
9
14
.\" disable hyphenation
10
15
.nh
11
16
.\" disable justification (adjust text to left margin only)
12
17
.ad l
 
18
.\" -----------------------------------------------------------------
 
19
.\" * MAIN CONTENT STARTS HERE *
 
20
.\" -----------------------------------------------------------------
13
21
.SH "NAME"
14
22
blacklist \- Shorewall Blacklist file
15
23
.SH "SYNOPSIS"
16
 
.HP 25
 
24
.HP \w'\fB/etc/shorewall/blacklist\fR\ 'u
17
25
\fB/etc/shorewall/blacklist\fR
18
26
.SH "DESCRIPTION"
19
27
.PP
45
53
When a packet arrives on an interface that has the
46
54
\fBblacklist\fR
47
55
option specified in
48
 
\fIshorewall\-interfaces\fR\&[1](5), its source IP address and MAC address is checked against this file and disposed of according to the
 
56
\m[blue]\fBshorewall\-interfaces\fR\m[]\&\s-2\u[1]\d\s+2(5), its source IP address and MAC address is checked against this file and disposed of according to the
49
57
\fBBLACKLIST_DISPOSITION\fR
50
58
and
51
59
\fBBLACKLIST_LOGLEVEL\fR
52
60
variables in
53
 
\fIshorewall\&.conf\fR\&[2](5)\&. If
 
61
\m[blue]\fBshorewall\&.conf\fR\m[]\&\s-2\u[2]\d\s+2(5)\&. If
54
62
\fBPROTOCOL\fR
55
63
or
56
64
\fBPROTOCOL\fR
65
73
.RS 4
66
74
To block DNS queries from address 192\&.0\&.2\&.126:
67
75
.sp
 
76
.if n \{\
68
77
.RS 4
 
78
.\}
69
79
.nf
70
80
        #ADDRESS/SUBNET         PROTOCOL        PORT
71
81
        192\&.0\&.2\&.126             udp             53
72
82
.fi
 
83
.if n \{\
73
84
.RE
 
85
.\}
74
86
.RE
75
87
.PP
76
88
Example 2:
77
89
.RS 4
78
90
To block some of the nuisance applications:
79
91
.sp
 
92
.if n \{\
80
93
.RS 4
 
94
.\}
81
95
.nf
82
96
        #ADDRESS/SUBNET         PROTOCOL        PORT
83
97
        \-                       udp             1024:1033,1434
84
98
        \-                       tcp             57,1433,1434,2401,2745,3127,3306,3410,4899,5554,6101,8081,9898
85
99
.fi
 
100
.if n \{\
86
101
.RE
 
102
.\}
87
103
.RE
88
104
.SH "FILES"
89
105
.PP
90
106
/etc/shorewall/blacklist
91
107
.SH "SEE ALSO"
92
108
.PP
93
 
\fIhttp://shorewall\&.net/blacklisting_support\&.htm\fR
 
109
\m[blue]\fBhttp://shorewall\&.net/blacklisting_support\&.htm\fR\m[]
94
110
.PP
95
111
shorewall(8), shorewall\-accounting(5), shorewall\-actions(5), shorewall\-hosts(5), shorewall\-interfaces(5), shorewall\-ipsec(5), shorewall\-maclist(5), shorewall\-masq(5), shorewall\-nat(5), shorewall\-netmap(5), shorewall\-params(5), shorewall\-policy(5), shorewall\-providers(5), shorewall\-proxyarp(5), shorewall\-route_rules(5), shorewall\-routestopped(5), shorewall\-rules(5), shorewall\&.conf(5), shorewall\-tcclasses(5), shorewall\-tcdevices(5), shorewall\-tcrules(5), shorewall\-tos(5), shorewall\-tunnels(5), shorewall\-zones(5)
96
112
.SH "NOTES"
97
113
.IP " 1." 4
98
114
shorewall-interfaces
99
115
.RS 4
100
 
\%shorewall-interfaces.html
 
116
\%http://www.shorewall.net/manpages/shorewall-interfaces.html
101
117
.RE
102
118
.IP " 2." 4
103
119
shorewall.conf
104
120
.RS 4
105
 
\%shorewall.conf.html
 
121
\%http://www.shorewall.net/manpages/shorewall.conf.html
106
122
.RE