~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
local.m4: Boundary network addresses can legitimately transit the VPN.
[firewall]
/
local.m4
diff --git
a/local.m4
b/local.m4
index
e486605
..
da26a37
100644
(file)
--- a/
local.m4
+++ b/
local.m4
@@
-143,7
+143,6
@@
defnet househub virtual
via housebdry dmz unsafe safe untrusted
defnet housebdry virtual
via househub hub
via housebdry dmz unsafe safe untrusted
defnet housebdry virtual
via househub hub
- noxit dmz
## House hosts.
defhost radius
## House hosts.
defhost radius
@@
-199,7
+198,6
@@
defnet colohub virtual
via colobdry jump colo
defnet colobdry virtual
via colohub hub
via colobdry jump colo
defnet colobdry virtual
via colohub hub
- noxit jump
defnet iodine untrusted
addr 172.29.198.128/28
via colohub
defnet iodine untrusted
addr 172.29.198.128/28
via colohub
@@
-246,6
+244,7
@@
defnet vpn safe
host crybaby 1 ::1:1
host terror 2 ::2:1
host orange 3 ::3:1
host crybaby 1 ::1:1
host terror 2 ::2:1
host orange 3 ::3:1
+ host haze 4 ::4:1
defnet anycast trusted
addr 172.29.199.224/27 2001:ba8:1d9:0::/64
via dmz unsafe safe untrusted jump colo vpn
defnet anycast trusted
addr 172.29.199.224/27 2001:ba8:1d9:0::/64
via dmz unsafe safe untrusted jump colo vpn
@@
-267,6
+266,14
@@
defhost mango
m4_divert(80)m4_dnl
###--------------------------------------------------------------------------
m4_divert(80)m4_dnl
###--------------------------------------------------------------------------
+### Connection tracking helper modules.
+
+for i in ftp; do
+ modprobe nf_conntrack_$i
+done
+
+m4_divert(80)m4_dnl
+###--------------------------------------------------------------------------
### Special forwarding exemptions.
case $forward in
### Special forwarding exemptions.
case $forward in