diff options
Diffstat (limited to 'data/nm-shared.xml')
| -rw-r--r-- | data/nm-shared.xml | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/data/nm-shared.xml b/data/nm-shared.xml new file mode 100644 index 00000000..0dea5dd6 --- /dev/null +++ b/data/nm-shared.xml @@ -0,0 +1,23 @@ +<?xml version="1.0" encoding="utf-8"?> +<zone target="ACCEPT"> + <short>NetworkManager Shared</short> + + <description> + This zone is used internally by NetworkManager when activating a + profile that uses connection sharing and doesn't have an explicit + firewall zone set. + Block all traffic to the local machine except ICMP, ICMPv6, DHCP + and DNS. Allow all forwarded traffic. + Note that future package updates may change the definition of the + zone unless you overwrite it with your own definition. + </description> + + <rule priority='32767'> + <reject/> + </rule> + + <protocol value='icmp'/> + <protocol value='ipv6-icmp'/> + <service name="dhcp"/> + <service name="dns"/> +</zone> |