X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;f=etc%2Fvuurmuur%2Frules%2Frules.conf;h=e9e2ea91d345246fbc7eb5e85ddc4f06853e05ae;hb=6dac66ce836a3f1cee85c99d5d8b560a4eab84ea;hp=283b884e250da33d6fc115b5d1a9ade22d8110f0;hpb=bbe5e169cc98b998e2b9e1656823245d3168e60e;p=matthijs%2Fservers%2Fdrsnuggles.git diff --git a/etc/vuurmuur/rules/rules.conf b/etc/vuurmuur/rules/rules.conf index 283b884..e9e2ea9 100644 --- a/etc/vuurmuur/rules/rules.conf +++ b/etc/vuurmuur/rules/rules.conf @@ -9,6 +9,8 @@ RULE="separator" RULE="Accept service ssh-host from any to firewall(any) options comment=\"ssh access to the host\"" RULE="Dnat service http from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"http to www\"" RULE="Accept service http from world.inet to firewall options in_int=\"vserver-www-nic\"" +RULE="Dnat service https from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"https to www\"" +RULE="Accept service https from world.inet to firewall options in_int=\"vserver-www-nic\"" RULE="Dnat service smtp from world.inet to mail.vservers.internal options comment=\"smtp to mail\"" RULE="Accept service smtp from world.inet to firewall options in_int=\"vserver-mail-nic\"" RULE="Dnat service dns from world.inet to dns.vservers.internal options in_int=\"inet-nic\",remoteport=\"54\",comment=\"dns to dns (running on port 54)\"" @@ -17,3 +19,10 @@ RULE="Dnat service imaps from world.inet to mail.vservers.internal options in_in RULE="Accept service imaps from world.inet to firewall options in_int=\"vserver-mail-nic\"" RULE="Dnat service ssh from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"ssh to login\"" RULE="Accept service ssh from world.inet to firewall options in_int=\"vserver-login-nic\"" +RULE="Dnat service locus from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Locus GPS tracker to login\"" +RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\"" +RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\"" +RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\"" +RULE="Dnat service ident from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Identd for login\"" +RULE="Accept service ident from world.inet to firewall options in_int=\"vserver-login-nic\",comment=\"Identd for login\"" +RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\""