allowservices inbound tcp \
ssh \
ident \
- ftp ftp_data \
+ smtp \
+ ftp ftps \
rsync \
- http https squid
+ http https squid ssquid
+
+allowservices inbound-untrusted tcp \
+ sunrpc mount nfs
+allowservices inbound-untrusted udp \
+ sunrpc mount nfs
+
+run iptables -A inbound -j ACCEPT \
+ -p udp --destination-port $port_icp \
+ -m limit --limit 10/second --limit-burst 100
## Other interesting things.
dnsresolver inbound
+dnsserver inbound
m4_divert(-1)
###----- That's all, folks --------------------------------------------------