diff options
| author | Mystery Man <unknown@mandriva.org> | 2003-03-15 15:26:37 +0000 |
|---|---|---|
| committer | Mystery Man <unknown@mandriva.org> | 2003-03-15 15:26:37 +0000 |
| commit | 6f745bb1829160c3da8034b00ea4725faf7f4340 (patch) | |
| tree | a6222c0684337a5283590c2b74bb538261086d18 /mdk-stage1/rp-pppoe/configs/firewall-standalone | |
| parent | bad9352db6617835f12292f262952def1207dcb1 (diff) | |
| download | drakx-backup-do-not-use-6f745bb1829160c3da8034b00ea4725faf7f4340.tar drakx-backup-do-not-use-6f745bb1829160c3da8034b00ea4725faf7f4340.tar.gz drakx-backup-do-not-use-6f745bb1829160c3da8034b00ea4725faf7f4340.tar.bz2 drakx-backup-do-not-use-6f745bb1829160c3da8034b00ea4725faf7f4340.tar.xz drakx-backup-do-not-use-6f745bb1829160c3da8034b00ea4725faf7f4340.zip | |
This commit was manufactured by cvs2svn to create tag 'V9_1_25mdk'.V9_1_25mdk
Diffstat (limited to 'mdk-stage1/rp-pppoe/configs/firewall-standalone')
| -rw-r--r-- | mdk-stage1/rp-pppoe/configs/firewall-standalone | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/mdk-stage1/rp-pppoe/configs/firewall-standalone b/mdk-stage1/rp-pppoe/configs/firewall-standalone deleted file mode 100644 index bcb1e92b1..000000000 --- a/mdk-stage1/rp-pppoe/configs/firewall-standalone +++ /dev/null @@ -1,32 +0,0 @@ -#!/bin/sh -# -# firewall-standalone This script sets up firewall rules for a standalone -# machine -# -# Copyright (C) 2000 Roaring Penguin Software Inc. This software may -# be distributed under the terms of the GNU General Public License, version -# 2 or any later version. - -# Interface to Internet -EXTIF=ppp+ - -ANY=0.0.0.0/0 - -ipchains -P input ACCEPT -ipchains -P output ACCEPT -ipchains -P forward DENY - -ipchains -F forward -ipchains -F input -ipchains -F output - -# Deny TCP and UDP packets to privileged ports -ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p udp -j DENY -ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p tcp -j DENY - -# Deny TCP connection attempts -ipchains -A input -l -i $EXTIF -p tcp -y -j DENY - -# Deny ICMP echo-requests -ipchains -A input -l -i $EXTIF -s $ANY echo-request -p icmp -j DENY - |