X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/b44f44040943cad5ac2c02159024e7b0392ce4f8..18b341c2f12a4a504a2960457a22690cf781623d:/radius.m4 diff --git a/radius.m4 b/radius.m4 index 029d9f1..7f0dc2c 100644 --- a/radius.m4 +++ b/radius.m4 @@ -22,31 +22,9 @@ ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. ###-------------------------------------------------------------------------- -### Config settings. - -## This router is involved in a routing asymmetry. -setconf(rp_filter, 0) -setconf(log_martians, 0) - -###-------------------------------------------------------------------------- -### Network interfaces. - -m4_divert(44)m4_dnl -## Interface definitions. -if_dmz=eth0 -if_trusted=eth1 -if_safe=eth2 -if_untrusted=eth3 -if_vpn=$if_dmz,$if_trusted -if_iodine=$if_dmz,$if_trusted -if_its_mz=$if_dmz,$if_trusted -if_its_pi=$if_dmz,$if_trusted - -m4_divert(-1) -###-------------------------------------------------------------------------- ### radius-specific rules. -m4_divert(82)m4_dnl +m4_divert(84)m4_dnl ## Externally visible services. allowservices inbound tcp \ ident \ @@ -84,7 +62,7 @@ run iptables -t nat -F run iptables -t nat -X run iptables -t nat -N outbound -run iptables -t nat -A outbound -j RETURN ! -o $if_dmz +run iptables -t nat -A outbound -j RETURN ! -o eth0 run iptables -t nat -A outbound -j RETURN ! -s 172.29.198.0/23 run iptables -t nat -A outbound -j RETURN -d 62.49.204.144/28 run iptables -t nat -A outbound -j RETURN -d 172.29.198.0/23