brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Push out 0.9.11

master
bbruns 2010-12-18 22:08:21 +00:00
parent 517d935340
commit a24671f5a3
3 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -7,6 +7,9 @@
- Option to use state or conntrack module for state tracking. - Option to use state or conntrack module for state tracking.
By default, use conntrack. By default, use conntrack.
- After some research, we seem to not need NEW state match in FORWARD - After some research, we seem to not need NEW state match in FORWARD
- Auto detect default gateway interface and IP of interface. Has potential problems
if run before we've got a default interface, so manually define EXTIF to be sure, and
things should be okay. This is mostly for people with dynamic IPs.
0.9.10 - Brielle Bruns <bruns@2mbit.com> 0.9.10 - Brielle Bruns <bruns@2mbit.com>
- Move clamp mss up earlier in the rules to possibly - Move clamp mss up earlier in the rules to possibly

4
conf/port-forwards.default
View File

@ -1,6 +1,6 @@
# Format is: # Format is:
# External interface:Src IP:External IP:External port:Internal ip:Internal port # External interface:Src IP:External IP:External port:Internal ip:Internal port
# If you want to allow any source IP or a dynamic IP external IP, use 0/0 and not 0.0.0.0 # You can safely leave the interface field blank as well as the Src IP field blank
# (iptables translates 0.0.0.0 to 0.0.0.0/32 which won't work) # However, you must have EXTIP defined or detected properly if you leave the External IP field blank
# Rename this file to port-forwards before using! # Rename this file to port-forwards before using!
#eth0:4.2.2.0:4.2.2.1:8080:tcp:192.168.0.100:80 #eth0:4.2.2.0:4.2.2.1:8080:tcp:192.168.0.100:80

7
options.default
View File

@ -50,11 +50,16 @@ POSTRUN="$BASEDIR/conf/postrun"
# which will try to detect the proper interface, # which will try to detect the proper interface,
# but requires a default route to be properly setup # but requires a default route to be properly setup
# first. # first.
EXTIF="auto" # We recommend manually defining this unless you really
# need to automagically detect the interface.
EXTIF="eth0"
# Primary external IP address # Primary external IP address
# Can be an IP address or auto, which will try to detect # Can be an IP address or auto, which will try to detect
# the primary external IP using the information from EXTIF # the primary external IP using the information from EXTIF
# This is mostly useful for people who have a dynamic external
# IP address. Everyone else should manually define this to
# avoid potential detection issues.
EXTIP="auto" EXTIP="auto"
# Program/script for finding the default external interface # Program/script for finding the default external interface