Firewall Handbuch für LINUX 2.0 und 2.2 - zurück

ipfwadm -I -a accept -P udp -W $EXTERNES_INTERFACE \
-S $NAMESERVER_2 53 \
-D $IPADDR $UNPRIVPORTS
ipfwadm -O -a accept -P udp -W $EXTERNES_INTERFACE \
-S $IPADDR $UNPRIVPORTS \
-D $NAMESERVER_2 53
ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
-S $NAMESERVER_2 53 \
-D $IPADDR $UNPRIVPORTS
ipfwadm -O -a accept -P tcp -W $EXTERNES_INTERFACE \
-S $IPADDR $UNPRIVPORTS \
-D $NAMESERVER_2 53
ipfwadm -I -a accept -P udp -W $EXTERNES_INTERFACE \
-S $NAMESERVER_3 53 \
-D $IPADDR $UNPRIVPORTS
ipfwadm -O -a accept -P udp -W $EXTERNES_INTERFACE \
-S $IPADDR $UNPRIVPORTS \
-D $NAMESERVER_3 53
ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
-S $NAMESERVER_3 53 \
-D $IPADDR $UNPRIVPORTS
ipfwadm -O -a accept -P tcp -W $EXTERNES_INTERFACE \
-S $IPADDR $UNPRIVPORTS \
-D $NAMESERVER_3 53
# SSH server (22)
# ipfwadm -I -a accept -P tcp -W $EXTERNES_INTERFACE \
# -S $ANYWHERE $UNPRIVPORTS -D $IPADDR 22
# ipfwadm -I -a accept -P tcp -W $EXTERNES_INTERFACE \
# -S $ANYWHERE $SSH_PORTS -D $IPADDR 22
# SSH client (22)
# ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
# -S $ANYWHERE 22 -D $IPADDR $UNPRIVPORTS
# ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
# -S $ANYWHERE 22 -D $IPADDR $SSH_PORTS
# TELNET server (23)
# ipfwadm -I -a accept -P tcp -W $EXTERNES_INTERFACE \
# -S $ANYWHERE $UNPRIVPORTS -D $IPADDR 23
# TELNET client (23)
# ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
# -S $ANYWHERE 23 -D $IPADDR $UNPRIVPORTS
# HTTP server (80)
# ipfwadm -I -a accept -P tcp -W $EXTERNES_INTERFACE \
# -S $ANYWHERE $UNPRIVPORTS -D $IPADDR 80
# HTTP client (80)
ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
-S $ANYWHERE 80 \
-D $IPADDR $UNPRIVPORTS
# HTTPS client (443)
ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
-S $ANYWHERE 443 \
-D $IPADDR $UNPRIVPORTS
# WWW-CACHE client (typical ports are 8000 or 8080)
# ipfwadm -I -a accept -P tcp -k -W $EXTERNES_INTERFACE \
Erstellt von Doc Gonzo - http://kickme.to/plugins