via housebdry dmz unsafe safe untrusted
defnet housebdry virtual
via househub hub
- noxit dmz
## House hosts.
defhost radius
defhost orange
iface wlan0 untrusted
iface vpn-radius unsafe
+defhost groove
+ iface eth0 unsafe
+ iface wlan0 untrusted
+ iface vpn-radius unsafe
defhost gibson
hosttype client
via colobdry jump colo
defnet colobdry virtual
via colohub hub
- noxit jump
defnet iodine untrusted
addr 172.29.198.128/28
via colohub
defnet vpn safe
addr 172.29.199.128/27 2001:ba8:1d9:6000::/64
via househub colohub
- host crybaby 1 ::1:0
- host terror 2 ::2:0
- host orange 3 ::3:0
+ host crybaby 1 ::1:1
+ host terror 2 ::2:1
+ host orange 3 ::3:1
+ host haze 4 ::4:1
+ host groove 5 ::5:1
defnet anycast trusted
addr 172.29.199.224/27 2001:ba8:1d9:0::/64
via dmz unsafe safe untrusted jump colo vpn
m4_divert(80)m4_dnl
###--------------------------------------------------------------------------
+### Connection tracking helper modules.
+
+for i in ftp; do
+ modprobe nf_conntrack_$i
+done
+
+m4_divert(80)m4_dnl
+###--------------------------------------------------------------------------
### Special forwarding exemptions.
case $forward in