vuurmuur: Forward ident connections to login.

[matthijs/servers/drsnuggles.git] / etc / vuurmuur / rules / rules.conf

diff --git a/etc/vuurmuur/rules/rules.conf b/etc/vuurmuur/rules/rules.conf
index fb4713ebd6c30482c5e3aad583e3c8440720b8cf..e9e2ea91d345246fbc7eb5e85ddc4f06853e05ae 100644 (file)
--- a/etc/vuurmuur/rules/rules.conf
+++ b/etc/vuurmuur/rules/rules.conf
@@ -9,6 +9,8 @@ RULE="separator"
 RULE="Accept service ssh-host from any to firewall(any) options comment=\"ssh access to the host\""
 RULE="Dnat service http from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"http to www\""
 RULE="Accept service http from world.inet to firewall options in_int=\"vserver-www-nic\""
+RULE="Dnat service https from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"https to www\""
+RULE="Accept service https from world.inet to firewall options in_int=\"vserver-www-nic\""
 RULE="Dnat service smtp from world.inet to mail.vservers.internal options comment=\"smtp to mail\""
 RULE="Accept service smtp from world.inet to firewall options in_int=\"vserver-mail-nic\""
 RULE="Dnat service dns from world.inet to dns.vservers.internal options in_int=\"inet-nic\",remoteport=\"54\",comment=\"dns to dns (running on port 54)\""
@@ -21,4 +23,6 @@ RULE="Dnat service locus from world.inet to login.vservers.internal options in_i
 RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\""
 RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\""
 RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\""
+RULE="Dnat service ident from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Identd for login\""
+RULE="Accept service ident from world.inet to firewall options in_int=\"vserver-login-nic\",comment=\"Identd for login\""
 RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\""