Platon Technologies
neprihlásený Prihlásiť Registrácia
SlovakEnglish
open source software development oslavujeme 10 rokov vývoja otvoreného softvéru! Sobota, 17. október 2026
[BACK] [TXT][DIR] Vyššie na [Platon] / scripts / shell / firewall

Rozdiely pre scripts/shell/firewall/default-firewall.conf medzi verziami 2.1 a 2.2

verzia 2.1, 2004/12/12 18:07:11 verzia 2.2, 2005/01/02 01:49:01
Riadok 14 
Riadok 14 
 # 2004-11-14 - created  # 2004-11-14 - created
 #  #
   
 # $Platon: scripts/shell/firewall/default-firewall.conf,v 2.0 2004/11/14 15:23:09 rajo Exp $  # $Platon: scripts/shell/firewall/default-firewall.conf,v 2.1 2004/12/12 18:07:11 rajo Exp $
   
 DEFAULT_POLICY="DROP"  DEFAULT_POLICY="DROP"
   
 # which modules to load  # which modules to load
 MODULES="ipt_LOG ipt_REJECT ip_conntrack_ftp"  MODULES="ipt_LOG ipt_REJECT ip_conntrack_ftp ip_nat_ftp"
   
 LOG_LIMIT="-m limit --limit 12/h --limit-burst 10"  LOG_LIMIT="-m limit --limit 12/h --limit-burst 10"
   
Riadok 37  LO_IFACE="${LO_IFACE:=lo}"
Riadok 37  LO_IFACE="${LO_IFACE:=lo}"
 LO_IP="IP_$LO_IFACE"  LO_IP="IP_$LO_IFACE"
   
 # Antispoof filter  # Antispoof filter
 #ANTISPOOF_IFACE="eth0"  ANTISPOOF_IFACE="eth0"
   
 #IFACE_ACCEPT_ALL="tun+ tap+"  # accept all packetes on these interfaces
   IFACE_ACCEPT_ALL="tun+ tap+"
   
 # Which ports will be allowed on INPUT (TCP connections)  # Which ports will be allowed on INPUT (TCP connections)
 ALL_ACCEPT_INPUT_TCP=""  ALL_ACCEPT_INPUT_TCP="22"
 # interface eth0  # interface eth0
 eth0_ACCEPT_INPUT_TCP="123 137 138 139 631 22 80 443 3128"  eth0_ACCEPT_INPUT_TCP="123 137 138 139 631 80 443 3128"
 # interface eth1  # interface eth1
 eth1_ACCEPT_INPUT_TCP="22 80 6000"  eth1_ACCEPT_INPUT_TCP="80 6000"
 # interface ppp0  # interface ppp0
 ppp0_ACCEPT_INPUT_TCP=""  ppp0_ACCEPT_INPUT_TCP=""
   
Riadok 71  ppp0_ACCEPT_INPUT_UDP=""
Riadok 72  ppp0_ACCEPT_INPUT_UDP=""
 # eth1 connected to local subnet  # eth1 connected to local subnet
 #NAT_SUBNET_IFACE="eth1"  #NAT_SUBNET_IFACE="eth1"
   
   NAT_LOG_NEW_CONNECTIONS="no"
   
   #
   # Forward configuration
   #
   # don't forward Miscrosoft protocols - NOT RFC compliant packets (packets in NEW state withouth SYN flag)
   NAT_FORWARD_MICROSOFT="no"
   # redirect all outgoing connections to SMTP port 25 to local server (simple virus/antispam protection)
   # redirect all outgoing HTTP connection to transparent proxy server (squid)
   NAT_TCP_PORT_REDIRECT="25:25 80:3128 8080:3128 1080:3128 3128:3128"
   # NAT only "secure" ports
   NAT_FORWARD_TCP_PORTS="20 21 22 23 53 113 123 143 194 220 873 992 993 994 995 1241 2401 3306 3690 5190 5432 6000"
   NAT_FORWARD_UDP_PORTS="20 21 22 23 53 113 123 143 194 220 873 992 993 994 995 1241 2401 3306 3690 5190 5432 6000"
   
Legend:
Odstranené z verzie2.1  
zmenené riadky
  Pridané vo verzii2.2
Platon Group <platon@platon.sk> http://platon.sk/
Copyright © 2002-2006 Platon Group
Stránka používa redakčný systém Metafox 		Na začiatok