summaryrefslogtreecommitdiffstats
path: root/mdk-stage1/rp-pppoe/configs/firewall-standalone
diff options
context:
space:
mode:
authorMystery Man <unknown@mandriva.org>2002-09-14 18:25:46 +0000
committerMystery Man <unknown@mandriva.org>2002-09-14 18:25:46 +0000
commit40fc236df0b0f5d9f61030264e4c82e88719a52e (patch)
treeb278238b7dc2559c8920bfb8a35f933b7754c7f5 /mdk-stage1/rp-pppoe/configs/firewall-standalone
parentd4079232d73723aab49dfa9d81187a7e8a60bf55 (diff)
downloaddrakx-backup-do-not-use-40fc236df0b0f5d9f61030264e4c82e88719a52e.tar
drakx-backup-do-not-use-40fc236df0b0f5d9f61030264e4c82e88719a52e.tar.gz
drakx-backup-do-not-use-40fc236df0b0f5d9f61030264e4c82e88719a52e.tar.bz2
drakx-backup-do-not-use-40fc236df0b0f5d9f61030264e4c82e88719a52e.tar.xz
drakx-backup-do-not-use-40fc236df0b0f5d9f61030264e4c82e88719a52e.zip
This commit was manufactured by cvs2svn to create tag 'V1_1_9_48mdk'.V1_1_9_48mdk
Diffstat (limited to 'mdk-stage1/rp-pppoe/configs/firewall-standalone')
-rw-r--r--mdk-stage1/rp-pppoe/configs/firewall-standalone32
1 files changed, 0 insertions, 32 deletions
diff --git a/mdk-stage1/rp-pppoe/configs/firewall-standalone b/mdk-stage1/rp-pppoe/configs/firewall-standalone
deleted file mode 100644
index bcb1e92b1..000000000
--- a/mdk-stage1/rp-pppoe/configs/firewall-standalone
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/bin/sh
-#
-# firewall-standalone This script sets up firewall rules for a standalone
-# machine
-#
-# Copyright (C) 2000 Roaring Penguin Software Inc. This software may
-# be distributed under the terms of the GNU General Public License, version
-# 2 or any later version.
-
-# Interface to Internet
-EXTIF=ppp+
-
-ANY=0.0.0.0/0
-
-ipchains -P input ACCEPT
-ipchains -P output ACCEPT
-ipchains -P forward DENY
-
-ipchains -F forward
-ipchains -F input
-ipchains -F output
-
-# Deny TCP and UDP packets to privileged ports
-ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p udp -j DENY
-ipchains -A input -l -i $EXTIF -d $ANY 0:1023 -p tcp -j DENY
-
-# Deny TCP connection attempts
-ipchains -A input -l -i $EXTIF -p tcp -y -j DENY
-
-# Deny ICMP echo-requests
-ipchains -A input -l -i $EXTIF -s $ANY echo-request -p icmp -j DENY
-