#!/bin/sh # generate netfilter firewall rc script # Copyright (C) 2004 Linus Sphinx # contact: linus@fullsack.com # latest version see: http://www.gnnix.org # last modification: 9:40 1/2/04 # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # . config $1 . policy tof topofrules stopsynattack spoofprotection disableicmpredirects disablesourceroutedpackets if [[ ($NICS > 1) ]]; then enableforwarding enableproxyarp addrules nat addrules forward forwardpolicy addrules mangle fi addrules input inputpolicy endofrules rcfunctions #chmod 0755 $FWSCRIPT