X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/2861f481552b0cd6c118e7169397e134fde03b15..f513127acd3ccf2f6ec695ba5d9396739bd21aba:/vampire.m4 diff --git a/vampire.m4 b/vampire.m4 index 2cf1a13..44eef03 100644 --- a/vampire.m4 +++ b/vampire.m4 @@ -22,31 +22,9 @@ ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. ###-------------------------------------------------------------------------- -### Config settings. - -## This router is involved in a routing asymmetry. -setconf(rp_filter, 0) -setconf(log_martians, 0) - -###-------------------------------------------------------------------------- -### Network interfaces. - -m4_divert(44)m4_dnl -## Interface definitions. -if_dmz=eth0.0 -if_trusted=eth0.1 -if_safe=$if_dmz,$if_trusted -if_untrusted=eth0.3 -if_vpn=vpn-+ -if_iodine=dns+ -if_its_mz=$if_dmz,$if_trusted -if_its_pi=$if_dmz,$if_trusted - -m4_divert(-1) -###-------------------------------------------------------------------------- ### vampire-specific rules. -m4_divert(82)m4_dnl +m4_divert(86)m4_dnl ## Externally visible services. allowservices inbound tcp \ finger ident \ @@ -102,7 +80,7 @@ run iptables -t nat -F run iptables -t nat -X run iptables -t nat -N outbound -run iptables -t nat -A outbound -j RETURN ! -o $if_dmz +run iptables -t nat -A outbound -j RETURN ! -o eth0.0 run iptables -t nat -A outbound -j RETURN ! -s 172.29.198.0/23 run iptables -t nat -A outbound -j RETURN -d 62.49.204.144/28 run iptables -t nat -A outbound -j RETURN -d 172.29.198.0/23