Rozdiely pre scripts/shell/firewall/default-firewall.conf medzi verziami 2.34 a 2.35
| verzia 2.34, 2009/11/06 23:14:36 |
verzia 2.35, 2010/08/08 23:34:25 |
|
|
| # 2004-11-14 - created |
# 2004-11-14 - created |
| # |
# |
| |
|
| # $Platon: scripts/shell/firewall/default-firewall.conf,v 2.33 2009-03-04 22:51:42 nepto Exp $ |
# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.34 2009-11-06 23:14:36 nepto Exp $ |
| |
|
| # uncomment next line for debugging |
# uncomment next line for debugging |
| #DEBUG="echo " |
#DEBUG="echo " |
| Riadok 210 eth1_SHAPING_RATE_internet="256kbit" |
|
| Riadok 210 eth1_SHAPING_RATE_internet="256kbit" |
|
| eth1_SHAPING_LATENCY_internet="50ms" |
eth1_SHAPING_LATENCY_internet="50ms" |
| eth1_SHAPING_BURST_internet="1540" |
eth1_SHAPING_BURST_internet="1540" |
| |
|
| |
# |
| |
# Custom rules |
| |
# |
| |
# Notes: |
| |
# - rules count starts with 0 (or 00, or 000) |
| |
# - you can use only numbers with the same width, so if you start with rule number 0, |
| |
# you can go up to rule number 9; if you need more rules, start with 00 or 000 |
| |
# |
| |
|
| |
# Practical example (block all outgoing VPN traffic, except MySQL): |
| |
# |
| |
# CUSTOM_RULE_0="-I OUTPUT -o tap0 -m state --state NEW -j REJECT"; |
| |
# CUSTOM_RULE_1="-I OUTPUT -o tap0 -d 10.138.10.1 -p TCP --dport 3307 -j ACCEPT"; |
| |
# CUSTOM_RULE_2="-I OUTPUT -o tap0 -d 10.138.10.13 -p TCP --dport 3306 -j ACCEPT"; |
| |
# CUSTOM_RULE_3="-I OUTPUT -o tap0 -d 10.138.10.14 -p TCP --dport 3306 -j ACCEPT"; |
| |
|
Platon Group <platon@platon.sk> http://platon.sk/
|
|