Opensource.Platon.SK CVS: scripts/shell/firewall/default-firewall.conf - diff

Vyššie na [Platon] / scripts / shell / firewall

verzia 2.33, 2009/03/04 22:51:42

verzia 2.34, 2009/11/06 23:14:36

Riadok 14

# 2004-11-14 - created

# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.32 2009-02-06 23:13:38 rajo Exp $

# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.33 2009-03-04 22:51:42 nepto Exp $

# uncomment next line for debugging

#DEBUG="echo "

Riadok 74 IFACE_ACCEPT_ALL="lo tun+ tap+"

# Packets to these ports are ALWAYS dropped (they doesn't appear in log)

#ALL_DROP_INPUT_TCP="135 137 139 445" # Microsoft Windows packets

#ALL_DROP_INPUT_UDP="135 137 139 445" # Microsoft Windows packets

#REAL_DROP_INPUT_TCP="" # the same as above but for this works

#REAL_DROP_INPUT_UDP="" # non-existent interfaces as well

# Which ports will be closed on INPUT (TCP and/or UDP connections)

# REJECT_WITH="icmp-port-unreachable" # default in Linux, but doesn't work well with all firewalls

REJECT_WITH="tcp-reset"

ALL_REJECT_INPUT_TCP="113 23"

ALL_REJECT_INPUT_UDP=""

REAL_REJECT_INPUT_TCP="113 23"

REAL_REJECT_INPUT_UDP=""

eth1_REJECT_INPUT_TCP=""

eth1_REJECT_INPUT_UDP=""

# Which ports will be allowed on INPUT (TCP and/or UDP connections)

ALL_ACCEPT_INPUT_TCP="22"

ALL_ACCEPT_INPUT_UDP="68" # dhcpclient

# The same as above but works for *really* all interfaces

# (this includes also yet non-existent interfaces, what is useful for IP failover)

REAL_ACCEPT_INPUT_TCP="22"

REAL_ACCEPT_INPUT_TCP=""

# interface eth0

# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP)

eth0_ACCEPT_INPUT_TCP="123 137 138 139 631 80 443 3128 2220"


Copyright © 2002-2006 Platon Group Stránka používa redakčný systém Metafox	Na začiatok