summaryrefslogtreecommitdiffstats
path: root/firewall.conf
diff options
context:
space:
mode:
Diffstat (limited to 'firewall.conf')
-rw-r--r--firewall.conf15
1 files changed, 9 insertions, 6 deletions
diff --git a/firewall.conf b/firewall.conf
index f58fffa..92284d7 100644
--- a/firewall.conf
+++ b/firewall.conf
@@ -25,8 +25,8 @@ ALLOW_INTS=''
OPEN_PORTS=("0.0.0.0/0 tcp ssh")
## Port knocking (tcp only)
-# "port knock_ports_combinaison"
-# example : PORT_KNOCK("22 121,4353,4242,111")
+# "port[,port] knock_ports_combinaison"
+# example : PORT_KNOCK("22,4242 121,4353,4242,111")
PORT_KNOCK=()
## Port forwarding
@@ -39,12 +39,15 @@ TRAFFICS=()
# example : REDIRECTIONS=("eth42 tcp 32 25" "$LAN_INT tcp 25 4242")
REDIRECTIONS=()
-## Whitelist ssh
+## Whitelist
# example with an external file
# source /etc/firewall/whitelist_ssh
-# WHITELIST_SSH=(${WHITELIST_SSH[@]})
-# example : WHITELIST_SSH=("1.2.3.4" "1.3.4.4" "192.168.1.0/24")
-#WHITELIST_SSH=()
+# WHITELIST=(${WHITELIST[@])
+# example : WHITELIST=("1.2.3.4" "1.3.4.4" "192.168.1.0/24")
+#WHITELIST=()
+
+## Whitelist port and protocol
+# exmaple : WHITELIST_OPEN_PORTS=("tcp ssh,8006" "udp 4242")
# Hook point to write your own iptables rules
ipt_hook()