From 45e8e1149027529194982212c804c0468aa01d98 Mon Sep 17 00:00:00 2001
From: Michael Biebl <biebl@debian.org>
Date: Sat, 30 May 2020 00:23:54 +0200
Subject: New upstream version 1.24.2

---
 data/nm-shared.xml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 data/nm-shared.xml

(limited to 'data/nm-shared.xml')

diff --git a/data/nm-shared.xml b/data/nm-shared.xml
new file mode 100644
index 00000000..0dea5dd6
--- /dev/null
+++ b/data/nm-shared.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="utf-8"?>
+<zone target="ACCEPT">
+  <short>NetworkManager Shared</short>
+
+  <description>
+    This zone is used internally by NetworkManager when activating a
+    profile that uses connection sharing and doesn't have an explicit
+    firewall zone set.
+    Block all traffic to the local machine except ICMP, ICMPv6, DHCP
+    and DNS. Allow all forwarded traffic.
+    Note that future package updates may change the definition of the
+    zone unless you overwrite it with your own definition.
+  </description>
+
+  <rule priority='32767'>
+    <reject/>
+  </rule>
+
+  <protocol value='icmp'/>
+  <protocol value='ipv6-icmp'/>
+  <service name="dhcp"/>
+  <service name="dns"/>
+</zone>
-- 
cgit 1.3.0-6-gf8a5