From 41b6fef1cf810d85bb57a61f05a153b41fd85912 Mon Sep 17 00:00:00 2001 From: Dietmar Maurer Date: Thu, 27 Feb 2014 12:12:45 +0100 Subject: [PATCH] improve example --- example/100.fw | 30 ++++++++++++++++++++++++++++-- 1 file changed, 28 insertions(+), 2 deletions(-) diff --git a/example/100.fw b/example/100.fw index 3ff340a..c144db8 100644 --- a/example/100.fw +++ b/example/100.fw @@ -1,9 +1,35 @@ # Example VM firewall configuration -#ACTION IFACE SOURCE DEST PROTO D-PORT S-PORT + +[OPTIONS] # VM specific firewall options + +# disable/enable the whole thing +enable: 1 + +# disable/enable MAC address filter +macfilter: 0 + +# default policy +policy-in: DROP +policy-out: REJECT + +# filter SMURFS +nosmurfs: 1 + +# filter illegal combinations of TCP flags +tcpflags: 1 + +# enable DHCP +dhcp: 1 + [IN] -SSH(ACCEPT) net0 192.168.2.192 - +#ACTION IFACE SOURCE DEST PROTO D-PORT S-PORT + +SSH(ACCEPT) net0 +SSH(ACCEPT) net0 # a comment +SSH(ACCEPT) net0 192.168.2.192 # only allow SSH from 192.168.2.192 +|SSH(ACCEPT) net0 # disbaled rule [OUT] -- 2.39.2