setup 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. IT_INPUT=INPUT
  2. IT_INPUT_LOG=LOGINPUT
  3. IT_OUTPUT=OUTPUT
  4. IT_OUTPUT_LOG=LOGOUTPUT
  5. PATH=/bin:/sbin:/usr/bin:/usr/sbin
  6. #Defautl network interface
  7. NETWORK_IF=eth0
  8. # Services that the system will offer to the network
  9. TCP_SERVICES="22" # SSH only
  10. UDP_SERVICES=""
  11. # Services the system will use from the network
  12. REMOTE_TCP_SERVICES="80 443" # web browsing
  13. REMOTE_UDP_SERVICES="53" # DNS
  14. # Network that will be used for remote mgmt
  15. # (if undefined, no rules will be setup)
  16. # NETWORK_MGMT=192.168.0.0/24
  17. # Port used for the SSH service, define this is you have setup a
  18. # management network but remove it from TCP_SERVICES
  19. SSH_PORT="22"
  20. # Default IP_TABLES command path
  21. IP_TABLES="/sbin/iptables"
  22. IP_TABLES_RESTORE="/sbin/iptables-restore"
  23. IP_TABLES_RESTORE_6="/sbin/ip6tables-restore"
  24. IP_TABLES_SAVE="/sbin/iptables-save"
  25. IP_TABLES_SAVE_6="/sbin/ip6tables-save"
  26. IT_INPUT=INPUT
  27. IT_INPUT_LOG=LOGINPUT
  28. IT_OUTPUT=OUTPUT
  29. IT_OUTPUT_LOG=LOGOUTPUT
  30. CONFIGURATION_DIR=/etc/lfirewall
  31. CONFIGURATION_FILE=${CONFIGURATION_DIR}/lfirewall.conf
  32. CONFIGURATION_LOCAL_FILE=${CONFIGURATION_DIR}/lfirewall.conf.local
  33. USER_RULES_IPTABLES=${CONFIGURATION_DIR}/iptables-user.v4
  34. USER_RULES_IPTABLES_6=${CONFIGURATION_DIR}/iptables-user.v6