brielle
/
SRFirewall
1
0
Fork 0
Code Issues Pull Requests Releases 1 Wiki Activity

Updated changelog, misc other things

master
bbruns 2014-04-06 17:59:17 +00:00
parent 87c9f62190
commit 94950f7f26
3 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -12,7 +12,9 @@
- NAT/NETMAP functionality (IPv4/IPv6) - 4/5/2014 - NAT/NETMAP functionality (IPv4/IPv6) - 4/5/2014
- IPv6 NAT/NETMAP is untested, have no internal use for it, let me know if works/doesnt - IPv6 NAT/NETMAP is untested, have no internal use for it, let me know if works/doesnt
- Forwarding functionality (IPv4/IPv6) - 4/5/2014 - Forwarding functionality (IPv4/IPv6) - 4/5/2014
- Adapted to use conntracking if available - 4/6/2014
- Deps on Enablev(4|6)ConnectionTracking for NAT functionality - 4/5/2014 - Deps on Enablev(4|6)ConnectionTracking for NAT functionality - 4/5/2014
- Service functionality (IPv4/IPv6) 4/6/2014
=-=-=-=-= PRE 2.0 REWRITE =-=-=-=-= =-=-=-=-= PRE 2.0 REWRITE =-=-=-=-=
1.1 - Brielle Bruns <bruns@2mbit.com> 1.1 - Brielle Bruns <bruns@2mbit.com>

10
etc/ipv4.conf
View File

@ -29,10 +29,18 @@ Enablev4MSSClamp="yes"
# packets it allows and refuses. On highly loaded systems or # packets it allows and refuses. On highly loaded systems or
# ones with low memory, this may be desirable. Everyone else # ones with low memory, this may be desirable. Everyone else
# should probably leave this on. # should probably leave this on.
# Depended on by: Enablev4NAT # Depended on by: Enablev4NAT Enablev4ConnTrackInterfaces
# Values: no | yes (default) # Values: no | yes (default)
Enablev4ConnectionTracking="yes" Enablev4ConnectionTracking="yes"
# Interfaces to enable connection tracking by default
# List of interfaces to enable ESTABLISHED, RELATED, and INVALID on
# by default. Normally, this is helpful and a good idea. Some
# people with specific requirements may want to disable and do manually
# in the custom rules.
# Values: none | all (default)| interface name
Enablev4ConnTrackInterfaces="all"
# Use /etc/resolv.conf as source for DNS servers that we communicate # Use /etc/resolv.conf as source for DNS servers that we communicate
# with as a client. If you turn this off (recommended if on static IP), # with as a client. If you turn this off (recommended if on static IP),
# then you will need to manually define the DNS servers you use. # then you will need to manually define the DNS servers you use.

10
etc/ipv6.conf
View File

@ -29,10 +29,18 @@ Enablev6MSSClamp="yes"
# packets it allows and refuses. On highly loaded systems or # packets it allows and refuses. On highly loaded systems or
# ones with low memory, this may be desirable. Everyone else # ones with low memory, this may be desirable. Everyone else
# should probably leave this on. # should probably leave this on.
# Depended on by: Enablev6NAT # Depended on by: Enablev6NAT Enablev6ConnTrackInterfaces
# Values: no | yes (default) # Values: no | yes (default)
Enablev6ConnectionTracking="yes" Enablev6ConnectionTracking="yes"
# Interfaces to enable connection tracking by default
# List of interfaces to enable ESTABLISHED, RELATED, and INVALID on
# by default. Normally, this is helpful and a good idea. Some
# people with specific requirements may want to disable and do manually
# in the custom rules.
# Values: none | all (default)| interface name
Enablev6ConnTrackInterfaces="all"
# Use /etc/resolv.conf as source for DNS servers that we communicate # Use /etc/resolv.conf as source for DNS servers that we communicate
# with as a client. If you turn this off (recommended if on static IP), # with as a client. If you turn this off (recommended if on static IP),
# then you will need to manually define the DNS servers you use. # then you will need to manually define the DNS servers you use.