summaryrefslogtreecommitdiffstats
path: root/mdk-stage1/rp-pppoe/configs/firewall-masq
diff options
context:
space:
mode:
authorThierry Vignaud <tv@mageia.org>2012-01-13 18:38:22 +0000
committerThierry Vignaud <tv@mageia.org>2012-01-13 18:38:22 +0000
commit21e436f23516b42efcb18ce9d3b742a10ad7d7d1 (patch)
tree4945c6a3444f6ae15a9a1c082643f27364d3ea54 /mdk-stage1/rp-pppoe/configs/firewall-masq
parent416724d23b6a1eb192e11a0ed75722c307f0f241 (diff)
downloaddrakx-backup-do-not-use-21e436f23516b42efcb18ce9d3b742a10ad7d7d1.tar
drakx-backup-do-not-use-21e436f23516b42efcb18ce9d3b742a10ad7d7d1.tar.gz
drakx-backup-do-not-use-21e436f23516b42efcb18ce9d3b742a10ad7d7d1.tar.bz2
drakx-backup-do-not-use-21e436f23516b42efcb18ce9d3b742a10ad7d7d1.tar.xz
drakx-backup-do-not-use-21e436f23516b42efcb18ce9d3b742a10ad7d7d1.zip
kill 10 years old snapshot of pppd & pppoe
(now using upstream pppd & pppoe)
Diffstat (limited to 'mdk-stage1/rp-pppoe/configs/firewall-masq')
-rw-r--r--mdk-stage1/rp-pppoe/configs/firewall-masq35
1 files changed, 0 insertions, 35 deletions
diff --git a/mdk-stage1/rp-pppoe/configs/firewall-masq b/mdk-stage1/rp-pppoe/configs/firewall-masq
deleted file mode 100644
index cb16fbecf..000000000
--- a/mdk-stage1/rp-pppoe/configs/firewall-masq
+++ /dev/null
@@ -1,35 +0,0 @@
-#!/bin/sh
-#
-# firewall-masq This script sets up firewall rules for a machine
-# acting as a masquerading gateway
-#
-# Copyright (C) 2000 Roaring Penguin Software Inc. This software may
-# be distributed under the terms of the GNU General Public License, version
-# 2 or any later version.
-
-# Interface to Internet
-EXTIF=ppp+
-
-ANY=0.0.0.0/0
-
-ipchains -P input ACCEPT
-ipchains -P output ACCEPT
-ipchains -P forward DENY
-
-ipchains -F forward
-ipchains -F input
-ipchains -F output
-
-# Deny TCP and UDP packets to privileged ports
-ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p udp -j DENY
-ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p tcp -j DENY
-
-# Deny TCP connection attempts
-ipchains -A input -l -i $EXTIF -p tcp -y -j DENY
-
-# Deny ICMP echo-requests
-ipchains -A input -l -i $EXTIF -s $ANY echo-request -p icmp -j DENY
-
-# Do masquerading
-ipchains -A forward -j MASQ
-echo 1 > /proc/sys/net/ipv4/ip_forward