#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#
version 5
# WAN:
interface eth5 WAN
protection strong
# jeglicher traffic vom server ins wan ist erlaubt:
client all accept
# vom wan zum server ist erlaubt:
server ping accept
server ssh accept
server samba accept
# GL:
interface eth2 GL
protection strong
server ping accept
server ftp accept
server http accept
server https accept
server smtp accept
client all accept
# CS
interface eth3 CS
protection strong
# server all accept
server ping accept
server ssh accept
server ftp accept
server http accept
server https accept
server smtp accept
server samba accept
client all accept
# Lab
interface eth1 Lab
protection strong
server ping accept
server ftp accept
server http accept
server https accept
server smtp accept
server ping accept
server ssh accept
client all accept
# Thecus
interface eth0 Thecus
protection strong
client all accept
server samba accept
server http accept
server https accept
server ping accept
# routing CS to WAN
router CS2WAN inface eth3 outface eth5
protection strong
masquerade
route all accept
# routing GL to WAN
router GL2WAN inface eth2 outface eth5
protection strong
masquerade
route all accept
# routing Lab to WAN
router Lab2WAN inface eth1 outface eth5
protection strong
masquerade
route all accept
# routing Thecus to WAN
router Thecus2WAN inface eth0 outface eth5
protection strong
route all deny
# routing WAN to CS
router WAN2CS inface eth5 outface eth3
protection strong
route all accept
# routing GL to CS
router GL2CS inface eth2 outface eth3
protection strong
route all deny
# routing Thecus to CS
router Thecus2CS inface eth0 outface eth3
protection strong
route all accept
# routing Lab to CS
router Lab2CS inface eth1 outface eth3
protection strong
route all deny
# routing WAN to Thecus
router WAN2Thecus inface eth5 outface eth0
protection strong
route all deny
# routing GL to Thecus
router GL2Thecus inface eth2 outface eth0
protection strong
route all accept
# routing CS to Thecus
router CS2Thecus inface eth3 outface eth0
protection strong
route all accept
# routing Lab to Thecus
router Lab2Thecus inface eth1 outface eth0
protection strong
route all accept