#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#

version 5
	
home_ips="192.168.200.0/24"
shop_ips="192.168.0.0/24"



interface eth0 home_phys
	policy accept
	server all	accept
	client all	accept
	

interface tap0 vpn_phys
	policy accept
	server all	accept
	client all	accept
	

interface pan0 vpn_phys2
	policy accept
	server all	accept
	client all	accept
	

interface eth1 shop
	policy accept
	server all	accept
	client all	accept


interface br0 home
	policy accept
	server all	accept
	client all	accept
	

router shop2home inface eth1 outface br0
	masquerade
	client all	accept
	server all	accept
	route  all	accept

	client "dhcp"	reject
	server "dhcp"	reject


router home2shop inface br0 outface eth1 #src "${home_ips}"
	masquerade
	client all	accept
	server all	accept
	route  all	accept

	client "dhcp"	reject
	server "dhcp"	reject
