]> gitweb.fluxo.info Git - puppet-shorewall.git/commitdiff
add extension script headers and footers
authorMicah Anderson <micah@riseup.net>
Tue, 7 Apr 2009 22:47:08 +0000 (18:47 -0400)
committerMicah Anderson <micah@riseup.net>
Tue, 7 Apr 2009 22:47:08 +0000 (18:47 -0400)
18 files changed:
files/boilerplate/clear.footer [new file with mode: 0644]
files/boilerplate/clear.header [new file with mode: 0644]
files/boilerplate/continue.footer [new file with mode: 0644]
files/boilerplate/continue.header [new file with mode: 0644]
files/boilerplate/init.footer [new file with mode: 0644]
files/boilerplate/init.header [new file with mode: 0644]
files/boilerplate/initdone.footer [new file with mode: 0644]
files/boilerplate/initdone.header [new file with mode: 0644]
files/boilerplate/maclog.footer [new file with mode: 0644]
files/boilerplate/maclog.header [new file with mode: 0644]
files/boilerplate/start.footer [new file with mode: 0644]
files/boilerplate/start.header [new file with mode: 0644]
files/boilerplate/started.footer [new file with mode: 0644]
files/boilerplate/started.header [new file with mode: 0644]
files/boilerplate/stop.footer [new file with mode: 0644]
files/boilerplate/stop.header [new file with mode: 0644]
files/boilerplate/stopped.footer [new file with mode: 0644]
files/boilerplate/stopped.header [new file with mode: 0644]

diff --git a/files/boilerplate/clear.footer b/files/boilerplate/clear.footer
new file mode 100644 (file)
index 0000000..662ac1c
--- /dev/null
@@ -0,0 +1 @@
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/clear.header b/files/boilerplate/clear.header
new file mode 100644 (file)
index 0000000..6a39b0b
--- /dev/null
@@ -0,0 +1,13 @@
+#
+# Shorewall version 4 - Clear
+#
+# /etc/shorewall/stop
+#
+#       Add commands below that you want to be executed at the beginning of a
+#       "shorewall stop" command.
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/continue.footer b/files/boilerplate/continue.footer
new file mode 100644 (file)
index 0000000..662ac1c
--- /dev/null
@@ -0,0 +1 @@
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/continue.header b/files/boilerplate/continue.header
new file mode 100644 (file)
index 0000000..d2ee48a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Continue File
+#
+#  /etc/shorewall/continue
+#
+#      Add commands below that you want to be executed after shorewall has
+#      cleared any existing Netfilter rules and has enabled existing
+#      connections.
+#
+# For additional information, see
+# http://shorewall.net/shorewall_extension_scripts.htm
+#
+###############################################################################
+
diff --git a/files/boilerplate/init.footer b/files/boilerplate/init.footer
new file mode 100644 (file)
index 0000000..662ac1c
--- /dev/null
@@ -0,0 +1 @@
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/init.header b/files/boilerplate/init.header
new file mode 100644 (file)
index 0000000..cbb0393
--- /dev/null
@@ -0,0 +1,13 @@
+#
+# Shorewall version 4 - Init File
+#
+# /etc/shorewall/init
+#
+#      Add commands below that you want to be executed at the beginning of
+#      a "shorewall start" or "shorewall restart" command.
+#
+# For additional information, see
+# http://shorewall.net/shorewall_extension_scripts.htm
+#
+###############################################################################
+
diff --git a/files/boilerplate/initdone.footer b/files/boilerplate/initdone.footer
new file mode 100644 (file)
index 0000000..662ac1c
--- /dev/null
@@ -0,0 +1 @@
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/initdone.header b/files/boilerplate/initdone.header
new file mode 100644 (file)
index 0000000..9252a3b
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Initdone File
+#
+# /etc/shorewall/initdone
+#
+#      Add commands below that you want to be executed during
+#      "shorewall start" or "shorewall restart" commands at the point where
+#      Shorewall has not yet added any perminent rules to the builtin chains.
+#
+# For additional information, see
+# http://shorewall.net/shorewall_extension_scripts.htm
+#
+###############################################################################
+
diff --git a/files/boilerplate/maclog.footer b/files/boilerplate/maclog.footer
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/maclog.header b/files/boilerplate/maclog.header
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/start.footer b/files/boilerplate/start.footer
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/start.header b/files/boilerplate/start.header
new file mode 100644 (file)
index 0000000..689dff1
--- /dev/null
@@ -0,0 +1,12 @@
+#
+# Shorewall version 4 - Start File
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want to be executed after shorewall has
+#      been started or restarted.
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/started.footer b/files/boilerplate/started.footer
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/started.header b/files/boilerplate/started.header
new file mode 100644 (file)
index 0000000..b7704db
--- /dev/null
@@ -0,0 +1,20 @@
+#
+# Shorewall version 4 - Started File
+#
+# /etc/shorewall/started
+#
+#      Add commands below that you want to be executed after shorewall has
+#      been completely started or restarted. The difference between this
+#      extension script and /etc/shorewall/start is that this one is invoked
+#      after delayed loading of the blacklist (DELAYBLACKLISTLOAD=Yes) and
+#      after the 'shorewall' chain has been created (thus signaling that the
+#      firewall is completely up).
+#
+#      This script should not change the firewall configuration directly but
+#      may do so indirectly by running /sbin/shorewall with the 'nolock'
+#      option.
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/stop.footer b/files/boilerplate/stop.footer
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/stop.header b/files/boilerplate/stop.header
new file mode 100644 (file)
index 0000000..0088abe
--- /dev/null
@@ -0,0 +1,13 @@
+#
+# Shorewall version 4 - Stop File
+#
+# /etc/shorewall/stop
+#
+#      Add commands below that you want to be executed at the beginning of a
+#      "shorewall stop" command.
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
diff --git a/files/boilerplate/stopped.footer b/files/boilerplate/stopped.footer
new file mode 100644 (file)
index 0000000..b0c382a
--- /dev/null
@@ -0,0 +1,14 @@
+#
+# Shorewall version 4 - Maclog File (Added in Shorewall version 3.2.5)
+#
+# /etc/shorewall/start
+#
+#      Add commands below that you want executed while mac filtering rules are
+#      being created. These will be executed once for each interface having
+#      'maclist' speciied and it is invoked just before the logging rule is 
+#      added to the current chain (the name of that chain will be in $CHAIN)
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
diff --git a/files/boilerplate/stopped.header b/files/boilerplate/stopped.header
new file mode 100644 (file)
index 0000000..438e5e0
--- /dev/null
@@ -0,0 +1,13 @@
+#
+# Shorewall version 4 - Stopped File
+#
+# /etc/shorewall/stopped
+#
+#      Add commands below that you want to be executed at the completion of a
+#      "shorewall stop" command.
+#
+# See http://shorewall.net/shorewall_extension_scripts.htm for additional
+# information.
+#
+###############################################################################
+#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE