X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;ds=sidebyside;f=etc%2Fvuurmuur%2Frules%2Frules.conf;h=bae0514bd85ab0f2a78ae9463976cfecf8505eea;hb=7f3c6490f16c65125f4a72aa7ad6bbbe774a9f89;hp=e9e2ea91d345246fbc7eb5e85ddc4f06853e05ae;hpb=5925e2a2e71c2046b65526fabf00e8cb4e3f8501;p=matthijs%2Fservers%2Fdrsnuggles.git diff --git a/etc/vuurmuur/rules/rules.conf b/etc/vuurmuur/rules/rules.conf index e9e2ea9..bae0514 100644 --- a/etc/vuurmuur/rules/rules.conf +++ b/etc/vuurmuur/rules/rules.conf @@ -7,6 +7,7 @@ RULE="Accept service any from zeratul.direct to firewall options comment=\"direc RULE="Accept service any from firewall to zeratul.direct options comment=\"direct traffice to zeratul\"" RULE="separator" RULE="Accept service ssh-host from any to firewall(any) options comment=\"ssh access to the host\"" +RULE="Accept service ident from world.inet to firewall(any)" RULE="Dnat service http from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"http to www\"" RULE="Accept service http from world.inet to firewall options in_int=\"vserver-www-nic\"" RULE="Dnat service https from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"https to www\"" @@ -23,6 +24,4 @@ RULE="Dnat service locus from world.inet to login.vservers.internal options in_i RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\"" RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\"" RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\"" -RULE="Dnat service ident from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Identd for login\"" -RULE="Accept service ident from world.inet to firewall options in_int=\"vserver-login-nic\",comment=\"Identd for login\"" RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\""