2002-05-01 00:42:57 +02:00
|
|
|
#
|
2007-07-03 22:32:01 +02:00
|
|
|
# Shorewall version 4.0 - Sample Rules File for two-interface configuration.
|
|
|
|
# Copyright (C) 2006,2007 by the Shorewall Team
|
2006-03-17 03:07:39 +01:00
|
|
|
#
|
|
|
|
# This library is free software; you can redistribute it and/or
|
|
|
|
# modify it under the terms of the GNU Lesser General Public
|
|
|
|
# License as published by the Free Software Foundation; either
|
|
|
|
# version 2.1 of the License, or (at your option) any later version.
|
|
|
|
#
|
|
|
|
# See the file README.txt for further details.
|
2007-02-23 19:51:55 +01:00
|
|
|
#------------------------------------------------------------------------------
|
|
|
|
# For information about entries in this file, type "man shorewall-rules"
|
2005-08-21 23:28:29 +02:00
|
|
|
#
|
2006-11-06 19:48:50 +01:00
|
|
|
# For more information, see http://www.shorewall.net/Documentation.htm#Rules
|
2002-05-01 00:42:57 +02:00
|
|
|
#
|
2005-08-21 23:28:29 +02:00
|
|
|
#############################################################################################################
|
2007-07-03 22:32:01 +02:00
|
|
|
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK
|
2005-09-12 19:42:30 +02:00
|
|
|
# PORT PORT(S) DEST LIMIT GROUP
|
2002-05-01 00:42:57 +02:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
# Accept DNS connections from the firewall to the network
|
2002-05-01 00:42:57 +02:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
DNS/ACCEPT $FW net
|
2002-05-01 00:42:57 +02:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
# Accept SSH connections from the local network for administration
|
2003-02-05 22:31:54 +01:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
SSH/ACCEPT loc $FW
|
2003-02-05 22:31:54 +01:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
# Allow Ping from the local network
|
2005-08-21 23:28:29 +02:00
|
|
|
#
|
2005-09-12 19:42:30 +02:00
|
|
|
Ping/ACCEPT loc $FW
|
2005-08-21 23:10:15 +02:00
|
|
|
|
|
|
|
#
|
|
|
|
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded..
|
|
|
|
#
|
|
|
|
|
2005-09-12 19:42:30 +02:00
|
|
|
Ping/REJECT net $FW
|
2005-08-21 23:10:15 +02:00
|
|
|
|
2005-09-12 19:42:30 +02:00
|
|
|
ACCEPT $FW loc icmp
|
|
|
|
ACCEPT $FW net icmp
|
2003-02-05 22:31:54 +01:00
|
|
|
#
|
2005-08-21 23:28:29 +02:00
|
|
|
|
2002-05-01 00:42:57 +02:00
|
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|