ORIG_FW_CONFIG='no' # use old style packet filter
# config: yes or no
INPUT_POLICY='REJECT' # be nice and use reject as policy
INPUT_ACCEPT_DEF='yes' # use default rule set
INPUT_LOG='no' # don't log anything
INPUT_LOG_LIMIT='3/minute 5' # log 3 events per minute; allow a
# burst of 5 events
INPUT_LIST_N='3'
INPUT_LIST_1='IP_NET_1 ACCEPT' # allow all hosts in the local
INPUT_LIST_2='IP_NET_2 ACCEPT' # network access to the router
INPUT_LIST_3='IP_NET_3 ACCEPT'
FORWARD_POLICY='REJECT' # be nice and use reject as policy
FORWARD_ACCEPT_DEF='yes' # use default rule set
FORWARD_LOG='no' # don't log anything
FORWARD_LOG_LIMIT='3/minute 5' # log 3 events per minute; allow a
# burst of 5 events
FORWARD_LIST_N='6'
#FORWARD_LIST_1='IP_NET_1 IP_NET_2 ACCEPT BIDIRECTIONAL'
#FORWARD_LIST_2='IP_NET_1 IP_NET_3 ACCEPT BIDIRECTIONAL' # to leave the subnet
FORWARD_LIST_1='prot:udp 137-138 DROP'
FORWARD_LIST_2='prot:tcp 139 DROP'
FORWARD_LIST_3='prot:tcp 445 DROP'
FORWARD_LIST_4='IP_NET_1 ACCEPT' # accept everything else
FORWARD_LIST_5='IP_NET_2 ACCEPT'
FORWARD_LIST_6='IP_NET_3 ACCEPT'
POSTROUTING_LIST_N='3'
#POSTROUTING_LIST_1='IP_NET_1 IP_NET_2 ACCEPT BIDIRECTIONAL'
#POSTROUTING_LIST_2='IP_NET_1 IP_NET_3 ACCEPT BIDIRECTIONAL'
POSTROUTING_LIST_1='IP_NET_1 MASQUERADE' # masquerade traffic leaving
POSTROUTING_LIST_2='IP_NET_2 MASQUERADE' # the subnet
POSTROUTING_LIST_3='IP_NET_3 MASQUERADE' # the subnet
#------------------------------------------------------------------------------
# Simple DMZ setup for dial-up based routers -- see documentation
#------------------------------------------------------------------------------
OPT_DMZ='yes'
DMZ_LOG='no'
DMZ_RED_DEV='ppp0'
DMZ_ORANGE_RED_N='0'
DMZ_ORANGE_RED_1='prot:tcp 80 ACCEPT'
#------------------------------------------------------------------------------
# Optional package: PORTFW
#------------------------------------------------------------------------------
PORTFW_N='0' # how many portforwardings to set up