# # Configuration to generate netfilter firewall rc script # Copyright (c)Linus Sphinx 1/1/04 # # 1) edit this file to reflect your setup # 2) edit the rules input, forward, to taste # 2) ./firestarter # now $SCRIPT [start|stop|status|restart|usage] # FWSCRIPT - FULL DEFAULT DESTINATION PATH OF SCRIPT FILE # you can pass this to firestarter on the command line for testing # slackware=/etc/rc.d/rc.firewall - fedoras=/etc/rc.d/init.d/rc.firewall # slackware add entries to rc.M and rc.K - fedora man chkconfig for instructions if [ "$1" = "" ]; then FWSCRIPT=/etc/rc.d/init.d/firewall else FWSCRIPT=$1 fi # NUMBER of network interface cards in this machine, 1 or 2 NICS=2 # YOUR NAMESERVERS DNS1=79.60.10.7 DNS2=79.60.10.9 DNS3=79.60.10.15 DNS4="" # internal network - first nic if you only have one nic this is it INTIF=eth6 INTIP=10.1.0.10 INTMASK=255.255.255.0 INTNET=10.1.0.0/24 INTIF2=eth7 INTIP2=10.10.10.10 INTMASK2=255.255.255.0 INTNET2=10.10.10.0/24 # external unsafe dmz network - second nic activates forwarding, nat etc. set NICS = >1 EXTIF=eth1 EXTIP=164.30.117.23 EXTMASK=255.255.255.128 EXTNET=164.30.98.0/25 #-- got more nics add translation to bottom of policy.