forked from extern/shorewall_code
756f156166
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2532 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
78 lines
2.2 KiB
Plaintext
78 lines
2.2 KiB
Plaintext
#
|
|
# Shorewall version 2.6 - Zones File
|
|
#
|
|
# /etc/shorewall/zones
|
|
#
|
|
# This file determines your network zones.
|
|
#
|
|
# Columns are:
|
|
#
|
|
# ZONE Short name of the zone (5 Characters or less in length).
|
|
# The names "all" and "none" are reserved and may not be
|
|
# used as zone names.
|
|
#
|
|
# IPSEC Yes -- Communication with all zone hosts is encrypted
|
|
# ONLY Your kernel and iptables must include policy
|
|
# match support.
|
|
# No -- Communication with some zone hosts may be encrypted.
|
|
# Encrypted hosts are designated using the 'ipsec'
|
|
# option in /etc/shorewall/hosts.
|
|
#
|
|
# OPTIONS, A comma-separated list of options as follows:
|
|
# IN OPTIONS,
|
|
# OUT OPTIONS reqid=<number> where <number> is specified
|
|
# using setkey(8) using the 'unique:<number>
|
|
# option for the SPD level.
|
|
#
|
|
# spi=<number> where <number> is the SPI of
|
|
# the SA used to encrypt/decrypt packets.
|
|
#
|
|
# proto=ah|esp|ipcomp
|
|
#
|
|
# mss=<number> (sets the MSS field in TCP packets)
|
|
#
|
|
# mode=transport|tunnel
|
|
#
|
|
# tunnel-src=<address>[/<mask>] (only
|
|
# available with mode=tunnel)
|
|
#
|
|
# tunnel-dst=<address>[/<mask>] (only
|
|
# available with mode=tunnel)
|
|
#
|
|
# strict Means that packets must match all rules.
|
|
#
|
|
# next Separates rules; can only be used with
|
|
# strict..
|
|
#
|
|
# Example:
|
|
# mode=transport,reqid=44
|
|
#
|
|
# The options in the OPTIONS column are applied to both incoming
|
|
# and outgoing traffic. The IN OPTIONS are applied to incoming
|
|
# traffic (in addition to OPTIONS) and the OUT OPTIONS are
|
|
# applied to outgoing traffic.
|
|
#
|
|
# If you wish to leave a column empty but need to make an entry
|
|
# in a following column, use "-".
|
|
#
|
|
# THE ORDER OF THE ENTRIES IN THIS FILE IS IMPORTANT IF YOU HAVE NESTED OR
|
|
# OVERLAPPING ZONES DEFINED THROUGH /etc/shorewall/hosts.
|
|
#
|
|
# See http://www.shorewall.net/Documentation.htm#Nested
|
|
#------------------------------------------------------------------------------
|
|
# Example zones:
|
|
#
|
|
# You have a three interface firewall with internet, local and DMZ
|
|
# interfaces.
|
|
#
|
|
# #ZONE IPSEC OPTIONS IN OUT
|
|
# net
|
|
# loc
|
|
# dmz
|
|
#
|
|
###############################################################################
|
|
#ZONE IPSEC OPTIONS IN OUT
|
|
# ONLY OPTIONS OPTIONS
|
|
net
|
|
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|