# Shorewall version 4 - Rules File
#
# For information on the settings in this file, type "man shorewall-rules"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-rules.html
#
####################################################################################################################################################
#ACTION         SOURCE          DEST        PROTO   DEST    SOURCE      ORIGINAL    RATE        USER/   MARK    CONNLIMIT   TIME
#                                                   PORT    PORT(S)     DEST        LIMIT       GROUP
#SECTION ESTABLISHED
#SECTION RELATED

SECTION NEW

# These macros are predefined by shorewall.  shorewall show macros
HTTP/ACCEPT     net             $FW
HTTPS/ACCEPT    net             $FW
IMAP/ACCEPT     net             $FW
IMAPS/ACCEPT    net             $FW
POP3/ACCEPT     net             $FW
POP3S/ACCEPT    net             $FW
SMTP/ACCEPT     net             $FW
SMTPS/ACCEPT    net             $FW
SSH/ACCEPT      net             $FW
# FTP/ACCEPT      net             $FW

# ventrilo server
ACCEPT      net         $FW tcp 3784
ACCEPT      net         $FW udp 3784

# Custom SSH rule to try and limit the script kiddies. Will limit connections
#   from an ip to one a minute with a burst of 3
ACCEPT          net       $FW           tcp     22      -          - 1/min:3