summaryrefslogtreecommitdiffstats
path: root/firewall.conf
blob: 5e7827ae996fdcf2e6b6cfe09eb92f81a508a3ae (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
IPTABLES=/sbin/iptables

# WAN configuration
WAN_INT='ethX'
IP='x.x.x.x'

# Allow ping
PING=1

# Allow FTP server (passive and active)
FTP=0

# NAT LAN_NETWORK
NAT=0
LAN_NETWORK=''
# Allow traffic between the WAN and LAN
LAN=0
LAN_INT='ethX'

# Allow all traffic for interface(s)
# example ALLOW_INTS='br0 xenbr42'
ALLOW_INTS=''

# Open ports
# source-protocole-portx:porty,portz,porta,... source-protocole-portx:porty,portz,.. ...
# example : OPEN_PORTS='0.0.0.0/0-tcp-ssh,imap,imaps 0.0.0.0/0-udp-1342'
OPEN_PORTS='0.0.0.0/0-tcp-ssh'

# Port forwarding
# source-port-destination:port-protocole source-port-destination:port-protocole ...
# example : TRAFFICS='0.0.0.0/0-80-192.168.0.42:80-tcp 42.42.42.42-4242-192.168.0.43:22-tcp'
TRAFFICS=""

# Port redirection
# interface-sourceport-destport-protocole
# example : REDIRECTIONS='$LAN_INT-25-4242-tcp $WAN_INT-25-4242-udp eth42-32-25-tcp'
REDIRECTIONS=""

# Hook point to write your own iptables rules
ipt_hook()
{
  echo "+ Load your own iptables rules"
  # Write your own iptables rules here
}