version 2.35, 2010/08/08 23:34:25 |
version 2.36, 2011/11/18 23:26:18 |
|
|
# 2004-11-14 - created |
# 2004-11-14 - created |
# |
# |
|
|
# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.34 2009-11-06 23:14:36 nepto Exp $ |
# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.35 2010-08-08 23:34:25 nepto Exp $ |
|
|
# uncomment next line for debugging |
# uncomment next line for debugging |
#DEBUG="echo " |
#DEBUG="echo " |
Line 96 REAL_ACCEPT_INPUT_TCP="22" |
|
Line 96 REAL_ACCEPT_INPUT_TCP="22" |
|
REAL_ACCEPT_INPUT_TCP="" |
REAL_ACCEPT_INPUT_TCP="" |
# interface eth0 |
# interface eth0 |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
eth0_ACCEPT_INPUT_TCP="123 137 138 139 631 80 443 3128 2220" |
# When ports are separated by spaces, multiple firewall rules with "--dport $port" are generated |
|
# When ports are separated by comma, single firewall rule with "-m multiport --dports 22,80,443" is generated |
|
eth0_ACCEPT_INPUT_TCP="123 137,138,139 631 80,443 3128 2220" |
#eth0_0_ACCEPT_INPUT_TCP="80" # permit only 80 on eth0:0 |
#eth0_0_ACCEPT_INPUT_TCP="80" # permit only 80 on eth0:0 |
|
|
# interface eth1 |
# interface eth1 |
Line 107 ppp0_ACCEPT_INPUT_TCP="" |
|
Line 109 ppp0_ACCEPT_INPUT_TCP="" |
|
# Which ports will be allowed on INPUT (UDP connections) |
# Which ports will be allowed on INPUT (UDP connections) |
# interface eth0 |
# interface eth0 |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
eth0_ACCEPT_INPUT_UDP="123 137 138 139 513 631" |
eth0_ACCEPT_INPUT_UDP="123 137,138,139 513 631" |
# interface ppp0 |
# interface ppp0 |
ppp0_ACCEPT_INPUT_UDP="" |
ppp0_ACCEPT_INPUT_UDP="" |
|
|