extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 09:47:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Corrected Duplicate Three Zone Rules Entrys

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@532 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
frannie 2003-04-06 21:41:28 +00:00
parent 850f18bea6
commit b4614e8c71
1 changed files with 16 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
Samples/three-interfaces/rules
View File

@ -221,45 +221,33 @@
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# PORT PORT(S) DEST # PORT PORT(S) DEST
# #
# Accept DNS connections from the firewall to the network # Accept DNS connections from the firewall to the Internet
# #
ACCEPT fw net tcp 53 ACCEPT fw net tcp 53
ACCEPT fw net udp 53 ACCEPT fw net udp 53
# #
# Accept SSH connections from the local network for administration.
#
ACCEPT loc fw tcp 22
#
##############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# PORT PORT(S) DEST
#
# Accept outgoing DNS connections from the firewall
#
ACCEPT fw net tcp 53
ACCEPT fw net udp 53
# #
# Accept SSH connections from the local network to the firewall and DMZ # Accept SSH connections from the local network to the firewall and DMZ
# #
ACCEPT loc fw tcp 22 ACCEPT loc fw tcp 22
ACCEPT loc dmz tcp 22 ACCEPT loc dmz tcp 22
# #
# DMZ DNS access to the internet # DMZ DNS access to the Internet
# #
ACCEPT dmz net tcp 53 ACCEPT dmz net tcp 53
ACCEPT dmz net udp 53 ACCEPT dmz net udp 53
# #
# Make ping work bi-directionally between the dmz, net, Firewall and local zone # Make ping work bi-directionally between the dmz, net, Firewall and local zone
# (assumes that the loc-> net policy is ACCEPT). # (assumes that the loc-> net policy is ACCEPT).
# #
ACCEPT net fw icmp 8 ACCEPT net fw icmp 8
ACCEPT loc fw icmp 8 ACCEPT loc fw icmp 8
ACCEPT dmz fw icmp 8 ACCEPT dmz fw icmp 8
ACCEPT loc dmz icmp 8 ACCEPT loc dmz icmp 8
ACCEPT dmz loc icmp 8 ACCEPT dmz loc icmp 8
ACCEPT dmz net icmp 8 ACCEPT dmz net icmp 8
ACCEPT fw loc icmp 8 ACCEPT fw loc icmp 8
ACCEPT fw dmz icmp 8 ACCEPT fw dmz icmp 8
ACCEPT net dmz icmp 8 # Only with Proxy ARP and ACCEPT net dmz icmp 8 # Only with Proxy ARP and
ACCEPT net loc icmp 8 # static NAT ACCEPT net loc icmp 8 # static NAT
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE