Shorewall: Difference between revisions

From Edgar BV Wiki
Jump to navigation Jump to search
No edit summary
No edit summary
Line 22: Line 22:
ACCEPT  net    fw      tcp    pop3
ACCEPT  net    fw      tcp    pop3
ACCEPT  net    fw      tcp    ssh
ACCEPT  net    fw      tcp    ssh
ACCEPT   net   fw      tcp     ftp
FTP/ACCEPT     net    fw
ACCEPT  net    fw     tcp    ftp-data
ACCEPT  net    fw      tcp    domain
ACCEPT  net    fw      tcp    domain
ACCEPT  net    fw      udp    domain
ACCEPT  net    fw      udp    domain

Revision as of 12:23, 4 March 2009

/etc/default/shorewall
Set startup=1

In /usr/share/doc/shorewall-common/default-config
make the following edits to the following files and then copy them to /etc/shorewall

interfaces
net     eth1    82.94.91.79

modules
(no edits)

policy
fw      net     ACCEPT
net     all     DROP    info
all     all     REJECT  info

rules
(under SECTION NEW)
ACCEPT   net    fw      tcp     smtp
ACCEPT   net    fw      tcp     pop3
ACCEPT   net    fw      tcp     ssh
FTP/ACCEPT      net     fw
ACCEPT   net    fw      tcp     domain
ACCEPT   net    fw      udp     domain
ACCEPT   fw     net     udp     domain
ACCEPT   net    fw      tcp     http
ACCEPT   fw     net     tcp     http
ACCEPT   net    fw      tcp     https
ACCEPT   net    fw      tcp     snmp
ACCEPT   fw     net     tcp     snmp
ACCEPT   net    fw      udp     snmp
ACCEPT   fw     net     udp     snmp
ACCEPT  net     fw      tcp     143
ACCEPT  net     fw      udp     143

start
dmesg -n5

zones
net     ipv4
(above fw      firewall)