[Firehol-support] iptables kernel modules

Redeeman redeeman at metanurb.dk
Sun Oct 9 22:59:47 BST 2005


sorry i write again..

i am wondering if there is a way i can make firehol tell what stuff i
need in the kernel

i dont do much with my firewall.. this is my firehol config:
----
server_redeenfs_ports="udp/32767 tcp/32767 udp/4001 tcp/4001 udp/2049
tcp/2049"
client_redeenfs_ports="500:65535"

dnat to 192.168.1.2 proto tcp dport 6881 inface eth1

interface eth0 redeeman
        policy accept

interface eth1 internet
        policy reject
        protection strong

        server ident reject with tcp-reset
        server "http https ssh dns smtp samba portmap redeenfs" accept
        server custom boinc "tcp/1043 tcp/31416 tcp/8081" default accept
        server ldaps accept src 192.168.0.2

        client "http https ssh dns irc" accept
        client all accept user redeeman
        client all accept user root

router internet2lan inface eth1 outface eth0
        masquerade reverse
        route all accept
        client all accept
-------

right now i havent setup my server as my real router, beause im
testing/setting it up.. but once i do, one more interface and router
will come.. so not really more features i will be using..


thanks..





More information about the Firehol-support mailing list