diff options
author | Mystery Man <unknown@mandriva.org> | 2002-08-01 17:20:30 +0000 |
---|---|---|
committer | Mystery Man <unknown@mandriva.org> | 2002-08-01 17:20:30 +0000 |
commit | 10e8a05be15a93ecb30d80420a7df79a41df0b6f (patch) | |
tree | 0fe3a8fe9665e857dcea7c8d35b539ab0295a6fa /mdk-stage1/rp-pppoe/configs/firewall-masq | |
parent | 20bc98cdccfed607ee0c3050a3a3bd196c0a1d38 (diff) | |
download | drakx-10e8a05be15a93ecb30d80420a7df79a41df0b6f.tar drakx-10e8a05be15a93ecb30d80420a7df79a41df0b6f.tar.gz drakx-10e8a05be15a93ecb30d80420a7df79a41df0b6f.tar.bz2 drakx-10e8a05be15a93ecb30d80420a7df79a41df0b6f.tar.xz drakx-10e8a05be15a93ecb30d80420a7df79a41df0b6f.zip |
This commit was manufactured by cvs2svn to create tag 'V1_1_9_1mdk'.V1_1_9_1mdk
Diffstat (limited to 'mdk-stage1/rp-pppoe/configs/firewall-masq')
-rw-r--r-- | mdk-stage1/rp-pppoe/configs/firewall-masq | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/mdk-stage1/rp-pppoe/configs/firewall-masq b/mdk-stage1/rp-pppoe/configs/firewall-masq deleted file mode 100644 index cb16fbecf..000000000 --- a/mdk-stage1/rp-pppoe/configs/firewall-masq +++ /dev/null @@ -1,35 +0,0 @@ -#!/bin/sh -# -# firewall-masq This script sets up firewall rules for a machine -# acting as a masquerading gateway -# -# Copyright (C) 2000 Roaring Penguin Software Inc. This software may -# be distributed under the terms of the GNU General Public License, version -# 2 or any later version. - -# Interface to Internet -EXTIF=ppp+ - -ANY=0.0.0.0/0 - -ipchains -P input ACCEPT -ipchains -P output ACCEPT -ipchains -P forward DENY - -ipchains -F forward -ipchains -F input -ipchains -F output - -# Deny TCP and UDP packets to privileged ports -ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p udp -j DENY -ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p tcp -j DENY - -# Deny TCP connection attempts -ipchains -A input -l -i $EXTIF -p tcp -y -j DENY - -# Deny ICMP echo-requests -ipchains -A input -l -i $EXTIF -s $ANY echo-request -p icmp -j DENY - -# Do masquerading -ipchains -A forward -j MASQ -echo 1 > /proc/sys/net/ipv4/ip_forward |