#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
# PORT PORT(S) DEST LIMIT GROUP
#
# Accept DNS connections from the firewall to the network, and from local to the firewall
#
ACCEPT fw net tcp 53
ACCEPT fw net udp 53
ACCEPT loc fw tcp 53
ACCEPT loc fw udp 53
#
# Accept SSH connections from the local network for administration
#
ACCEPT loc fw tcp ssh
ACCEPT loc fw tcp www
# Allow Ping To And From Firewall and to Net
#
ACCEPT loc fw icmp 8
ACCEPT loc net icmp 8
ACCEPT net fw icmp 8
ACCEPT fw loc icmp
ACCEPT fw net icmp
#
# Socks4
#
ACCEPT loc fw tcp socks
ACCEPT loc fw udp socks
#
# Redirect for Squid/Clamsmtp/etc..
#
REDIRECT loc 3128 tcp www - !192.168.1.1,216.10.50.7
REDIRECT loc 10025 tcp smtp - !192.168.1.1,216.10.50.7
#
# Allow HTTP/SSH/VPN/DNS/IMAP(S)/POP(S)/SMTP(S)
#
ACCEPT loc net tcp ssh
ACCEPT loc net tcp www
ACCEPT loc net tcp domain
ACCEPT loc net udp domain
ACCEPT loc net tcp imap2,imap3,imaps
ACCEPT loc net tcp pop2,pop3,pop3s
ACCEPT loc net tcp smtp,ssmtp
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE