821af4d12f
Signed-off-by: Gregory Colpart <reg@evolix.fr>
80 lines
1.7 KiB
Plaintext
80 lines
1.7 KiB
Plaintext
# Fichier de configuration
|
|
# pour minifirewall
|
|
|
|
# version 0.1 - 12 juillet 2007 $Id: firewall.rc,v 1.2 2007/07/12 19:08:59 reg Exp $
|
|
|
|
# Interface concernee
|
|
INT='eth0'
|
|
|
|
# IP associee (plus utilisee dans les scripts)
|
|
# INTIP='192.168.0.2'
|
|
# reseau beneficiant d'acces privilegies
|
|
# (sera souvent IP/32)
|
|
INTLAN='192.168.0.2/32'
|
|
|
|
# trusted ip addresses
|
|
TRUSTEDIPS='62.212.121.90 62.212.111.216 88.179.18.233 85.118.59.4 85.118.59.50'
|
|
|
|
# privilegied ip addresses
|
|
# (trusted ip addresses *are* privilegied)
|
|
PRIVILEGIEDIPS=''
|
|
|
|
# Services "protected"
|
|
# a mettre aussi en public si necessaire !!
|
|
SERVICESTCP1p='21'
|
|
SERVICESUDP1p=''
|
|
|
|
# Services "publics"
|
|
SERVICESTCP1='20 21 25 53 993 995'
|
|
SERVICESUDP1='53'
|
|
|
|
# Services "semi-publics"
|
|
SERVICESTCP2='22 80 110 143 443'
|
|
SERVICESUDP2=''
|
|
|
|
# Services "prives"
|
|
SERVICESTCP3='5666'
|
|
SERVICESUDP3=''
|
|
|
|
################### SORTANTS
|
|
|
|
# DNS
|
|
# (Attention, si un serveur DNS est installe en local
|
|
# mettre 0.0.0.0/0)
|
|
DNSSERVEURS='85.31.205.33 78.153.240.29'
|
|
|
|
# HTTP : security.d.o x3, zidane, modsecurity www.debian.org
|
|
# /!\ Possibilite d'utiliser des noms de domaines
|
|
# mais il est conseiller de placer un rechargement
|
|
# du minifirewall en crontab
|
|
# (Attention, si un proxy HTTP est installe en local
|
|
# mettre 0.0.0.0/0)
|
|
HTTPSITES='security.debian.org pub.evolix.net volatile.debian.org mirror.evolix.org'
|
|
|
|
# HTTPS
|
|
# /!\ Possibilite d'utiliser des noms de domaines
|
|
# mais il est conseiller de placer un rechargement
|
|
# du minifirewall en crontab
|
|
HTTPSSITES=''
|
|
|
|
# FTP
|
|
FTPSITES=''
|
|
|
|
# SSH
|
|
SSHOK='0.0.0.0/0'
|
|
|
|
# SMTP
|
|
SMTPOK='0.0.0.0/0'
|
|
|
|
# SMTP secure (port 465 et 587)
|
|
SMTPSOK=''
|
|
|
|
# NTP
|
|
NTPOK='78.153.240.29'
|
|
|
|
|
|
################### Specific rules
|
|
# /sbin/iptables ....
|
|
# /sbin/iptables ....
|
|
# /sbin/iptables ....
|