| verzia 2.35, 2010/08/08 23:34:25 |
verzia 2.36, 2011/11/18 23:26:18 |
|
|
| # 2004-11-14 - created |
# 2004-11-14 - created |
| # |
# |
| |
|
| # $Platon: scripts/shell/firewall/default-firewall.conf,v 2.34 2009-11-06 23:14:36 nepto Exp $ |
# $Platon: scripts/shell/firewall/default-firewall.conf,v 2.35 2010-08-08 23:34:25 nepto Exp $ |
| |
|
| # uncomment next line for debugging |
# uncomment next line for debugging |
| #DEBUG="echo " |
#DEBUG="echo " |
| Riadok 96 REAL_ACCEPT_INPUT_TCP="22" |
|
| Riadok 96 REAL_ACCEPT_INPUT_TCP="22" |
|
| REAL_ACCEPT_INPUT_TCP="" |
REAL_ACCEPT_INPUT_TCP="" |
| # interface eth0 |
# interface eth0 |
| # (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
| eth0_ACCEPT_INPUT_TCP="123 137 138 139 631 80 443 3128 2220" |
# When ports are separated by spaces, multiple firewall rules with "--dport $port" are generated |
| |
# When ports are separated by comma, single firewall rule with "-m multiport --dports 22,80,443" is generated |
| |
eth0_ACCEPT_INPUT_TCP="123 137,138,139 631 80,443 3128 2220" |
| #eth0_0_ACCEPT_INPUT_TCP="80" # permit only 80 on eth0:0 |
#eth0_0_ACCEPT_INPUT_TCP="80" # permit only 80 on eth0:0 |
| |
|
| # interface eth1 |
# interface eth1 |
| Riadok 107 ppp0_ACCEPT_INPUT_TCP="" |
|
| Riadok 109 ppp0_ACCEPT_INPUT_TCP="" |
|
| # Which ports will be allowed on INPUT (UDP connections) |
# Which ports will be allowed on INPUT (UDP connections) |
| # interface eth0 |
# interface eth0 |
| # (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
# (use "port", or "ip:port", or "ip:ALL" for all ports from certain IP) |
| eth0_ACCEPT_INPUT_UDP="123 137 138 139 513 631" |
eth0_ACCEPT_INPUT_UDP="123 137,138,139 513 631" |
| # interface ppp0 |
# interface ppp0 |
| ppp0_ACCEPT_INPUT_UDP="" |
ppp0_ACCEPT_INPUT_UDP="" |
| |
|