View source for Firewall Clarkconnect5 Netcafe dualwan

'''Firewall Rule แยก เน็ท เกมส์ by phat@mscompute.com'''

นำไปวางใน '''/etc/firewall'''

<source lang=bash>
###############################################################################
#
# Use the web-based administration tool to change the firewall configuration.
#
###############################################################################

# Firewall mode
#--------------
# Possible configurations:
# gateway trustedgateway standalone trustedstandalone dmz

MODE="gateway"


# Interface roles
#----------------

EXTIF="ppp0 ppp1"
LANIF="eth1"
DMZIF=""
WIFIF=""
HOTIF=""
DNSIF="ppp1"

# Bandwidth management (QoS)
#---------------------------

BANDWIDTH_QOS="off"
BANDWIDTH_UPSTREAM=""
BANDWIDTH_DOWNSTREAM=""

# Multipath
#----------

MULTIPATH="on"
MULTIPATH_WEIGHTS="ppp1|1 ppp0|1"

# Squid configuration
#--------------------

SQUID_TRANSPARENT="off"
SQUID_FILTER_PORT=""

# VPN configuration
#------------------

IPSEC_SERVER="off"
PPTP_SERVER="off"

## One-to-one NAT mode
#---------------------

ONE_TO_ONE_NAT_MODE="type2"

# VPN LAN override
#-----------------

LANNET=""

# Protocol filtering (l7-filter)
# When set to 'on', all forwarded traffic will pass through the l7-filter
# daemon. l7-filter must be running or the firewall will ignore this setting.
#----------------------------------------------------------------------------

PROTOCOL_FILTERING="on"

# Webconfig rules
#----------------
# WARNING:
# The firewall script will not perform further validation on the rules below.
# Use the web-based administration tool to change the firewall configuration.
#
# Name|Group|Flags|Protocol|Address|Port|Parameter
#
# -Name and Group are symbolic names which only have meaning within the
#  web-based administration tool (webconfig).
# -Flags are OR combined to produce a 4-byte bitmask.  This needs to be
#  explained in full detail somewhere.  Reading the source to IsValidFlags()
#  within the firewallrule.class file is the best documentation about this
#  at the moment.
# -Protocol is an integer ID listed in /etc/protocols.
# -Address is an IPv4, IPv6, or MAC/HW address depending on the rule's flags.
# -Port is a TCP/UDP service address depending on the rule's flags and
#  protocol.
# -Parameter can contain additional rule criteria depending on the rule's
#  flags and/or protocol.
#
# NOTE: If editing these by hand, do not add spaces between fields.
RULES="\
	Audition_Mark||0x10000400|6||18200:18210|ppp0 \
	Cabal_Mark||0x10000400|6||38100|ppp0 \
	DNS-TCP||0x10000001|6||53| \
	DNS-UDP||0x10000001|17||53| \
	DOTA-U1||0x10000001|17||6000:6500| \
	DOTA1||0x10000001|6||6000:6500| \
	DOTA_PC1||0x10000008|6|192.168.1.101|6101|6101 \
	DOTA_PC10||0x10000008|6|192.168.1.110|6110|6110 \
	DOTA_PC11||0x10000008|6|192.168.1.111|6111|6111 \
	DOTA_PC12||0x10000008|6|192.168.1.112|6112|6112 \
	DOTA_PC13||0x10000008|6|192.168.1.113|6113|6113 \
	DOTA_PC14||0x10000008|6|192.168.1.114|6114|6114 \
	DOTA_PC15||0x10000008|6|192.168.1.115|6115|6115 \
	DOTA_PC16||0x10000008|6|192.168.1.116|6116|6116 \
	DOTA_PC17||0x10000008|6|192.168.1.117|6117|6117 \
	DOTA_PC18||0x10000008|6|192.168.1.118|6118|6118 \
	DOTA_PC19||0x10000008|6|192.168.1.119|6119|6119 \
	DOTA_PC2||0x10000008|6|192.168.1.102|6102|6102 \
	DOTA_PC20||0x10000008|6|192.168.1.120|6120|6120 \
	DOTA_PC21||0x10000008|6|192.168.1.121|6121|6121 \
	DOTA_PC22||0x10000008|6|192.168.1.122|6122|6122 \
	DOTA_PC23||0x10000008|6|192.168.1.123|6123|6123 \
	DOTA_PC24||0x10000008|6|192.168.1.124|6124|6124 \
	DOTA_PC25||0x10000008|6|192.168.1.125|6125|6125 \
	DOTA_PC3||0x10000008|6|192.168.1.103|6103|6103 \
	DOTA_PC4||0x10000008|6|192.168.1.104|6104|6104 \
	DOTA_PC5||0x10000008|6|192.168.1.105|6105|6105 \
	DOTA_PC6||0x10000008|6|192.168.1.106|6106|6106 \
	DOTA_PC7||0x10000008|6|192.168.1.107|6107|6107 \
	DOTA_PC8||0x10000008|6|192.168.1.108|6108|6108 \
	DOTA_PC9||0x10000008|6|192.168.1.109|6109|6109 \
	Dekaron_Mark||0x10000400|6||50000:50010|ppp0 \
	DotA-Mark||0x10000400|6||6101:6200|ppp0 \
	FTP_Mark||0x10000400|6||21|ppp1 \
	Freestyle_Mark||0x10000400|6||33331|ppp0 \
	Ge_Mark||0x10000400|6||7000:7003|ppp0 \
	Ghost_Mark||0x10000400|6||13001:14000|ppp0 \
	Gunbound_Mark||0x10000400|6||8350:8365|ppp0 \
	HTTP||0x10000001|6||80| \
	HTTP||0x10000400|6||80|ppp1 \
	HTTPS||0x10000001|6||443| \
	HTTPS||0x10000400|6||443|ppp1 \
	IP_Bonus||0x10000400|6||45800:45809|ppp0 \
	MSN||0x10000400|6||1863|ppp1 \
	Playplus||0x10000400|6||2106|ppp0 \
	Point_Blank_Mark||0x10000400|6||39190:40010|ppp0 \
	Point_Blank_UDP_Mark||0x10000400|6||39190:40010|ppp0 \
	Ragnarok1||0x10000400|6||6900|ppp0 \
	Ragnarok2||0x10000400|6||5000|ppp0 \
	Squid_Mark||0x10000400|6||3128|ppp1 \
	SSH||0x10000001|6||22| \
	Specialforce_Mark||0x10000400|6||27900:28000|ppp0 \
	Specialforce_UDP_Mark||0x10000400|6||20000:21000|ppp0 \
	Sudden_Attack_Mark||0x10000400|6||12001:13000|ppp0 \
	Sudden_Attack_Udp_Mark||0x10000400|17||27000:27100|ppp0 \
	Webconfig||0x10000001|6||81| \
	webservice||0x10000001|6||1875| \
"

# vim: ts=4 syntax=sh
</source>