#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#
version 5
# WAN:
interface eth5 WAN
protection strong
# jeglicher traffic vom server ins wan ist erlaubt:
client all accept
# vom wan zum server ist erlaubt:
server ping accept
server ssh accept
server samba accept
# GL:
interface eth2 GL
protection strong
server ping accept
server ftp accept
server http accept
server https accept
server smtp accept
client all accept
# CS
interface eth3 CS
# protection strong
# server all accept
server ping accept
server ssh accept
server ftp accept
server http accept
server https accept
server smtp accept
server samba accept
client all accept
# Lab
interface eth1 Lab
# protection strong
server ping accept
server ftp accept
server http accept
server https accept
server smtp accept
server ping accept
server ssh accept
client all accept
# Thecus
interface eth0 Thecus
# protection strong
client all accept
server samba accept
server http accept
server https accept
server ping accept
# routing CS to WAN
router CS2WAN inface eth3 outface eth5
protection strong
masquerade
route all accept
# routing GL to WAN
router GL2WAN inface eth2 outface eth5
protection strong
masquerade
route all accept
# routing Lab to WAN
router Lab2WAN inface eth1 outface eth5
protection strong
masquerade
route all accept
# routing Thecus to WAN
router Thecus2WAN inface eth0 outface eth5
protection strong
route all deny
# routing WAN to CS
router WAN2CS inface eth5 outface eth3
protection strong
route all deny
# routing GL to CS
router GL2CS inface eth2 outface eth3
protection strong
route all deny
# routing Thecus to CS
router Thecus2CS inface eth0 outface eth3
# protection strong
route all accept
# routing Lab to CS
router Lab2CS inface eth1 outface eth3
# protection strong
route all accept
route ping accept
# routing WAN to Thecus
router WAN2Thecus inface eth5 outface eth0
protection strong
route all deny
# routing GL to Thecus
router GL2Thecus inface eth2 outface eth0
protection strong
route all accept
# routing CS to Thecus
router CS2Thecus inface eth3 outface eth0
# protection strong
# masquerade
route all accept
route ping accept
# route samba accept
# routing Lab to Thecus
router Lab2Thecus inface eth1 outface eth0
# protection strong
route all accept
route ping accept
# routing WAN to Lab
router WAN2Lab inface eth5 outface eth1
protection strong
route all deny
# routing CS to Lab
router CS2Lab inface eth3 outface eth1
# protection strong
route all accept
route ping accept
# routing GL to Lab
router GL2Lab inface eth2 outface eth1
protection strong
route all accept
# routing Thecus to Lab
router Thecus2Lab inface eth0 outface eth1
# protection strong
route all accept
# routing WAN to GL
router WAN2GL inface eth5 outface eth2
protection strong
route all deny
# routing CS to GL
router CS2GL inface eth3 outface eth2
protection strong
route all deny
# routing Lab to GL
router Lab2GL inface eth1 outface eth2
protection strong
route all deny
# routing Thecus to GL
router Thecus2GL
protection strong
route all deny