Diff for scripts/shell/firewall/fw-universal.sh between version 2.40 and 2.42
version 2.40, 2006/03/04 02:09:52 |
version 2.42, 2006/03/12 22:23:40 |
Line 57 AWK="${AWK:=/usr/bin/awk}" |
|
Line 57 AWK="${AWK:=/usr/bin/awk}" |
|
|
|
# loopback interface |
# loopback interface |
LO_IFACE="${LO_IFACE:=lo}" |
LO_IFACE="${LO_IFACE:=lo}" |
|
# Hide NAT clients behind firewall |
|
NAT_SET_TTL="${NAT_SET_TTL:=no}" |
|
|
# |
# |
# CONSTANTS - Do not edit |
# CONSTANTS - Do not edit |
|
|
|
|
# hide NAT clients behind firewall: - set TTL |
# hide NAT clients behind firewall: - set TTL |
# XXX: warning: this breaks traceroute !!! |
# XXX: warning: this breaks traceroute !!! |
if [ "e$NAT_SET_TTL" = "eyes" ]; then |
if [ ! "a$NAT_SET_TTL" = "ano" ]; then |
echo "NAT: clients hidden behind firewall - setting TTL" |
echo "NAT: clients hidden behind firewall - setting TTL to $NAT_SET_TTL" |
$IPTABLES -t mangle -A POSTROUTING -o $NAT_LAN_IFACE -j TTL --ttl-set 64 |
$IPTABLES -t mangle -A POSTROUTING -o $NAT_LAN_IFACE -j TTL --ttl-set $NAT_SET_TTL |
fi |
fi |
|
|
|
|
|
|
syn_flood |
syn_flood |
mangle_prerouting |
mangle_prerouting |
mangle_output |
mangle_output |
|
accept_related |
log_new_connections |
log_new_connections |
drop_output |
drop_output |
allow_input |
allow_input |
allow_output |
allow_output |
allow_icmp |
allow_icmp |
accept_related |
|
accept_loopback |
accept_loopback |
masquerade |
masquerade |
log_input_drop |
log_input_drop |
Platon Group <platon@platon.org> http://platon.org/
|
|