Firewall Handbuch für LINUX 2.0 und 2.2 - zurück

echo "Usage: $0
"
exit 1
fi
case "$INTERFACE" in
ippp*)
. /etc/rc.config
# find the device
found=0
for I in $NETCONFIG; do
eval NETDEV=\$NETDEV$I
if [ $NETDEV = $INTERFACE ]; then
found=1
break;
fi
done
if [ $found -eq 0 ]; then
echo "Device '$INTERFACE' not configured in '/etc/rc.config'"
exit 1
fi
eval IFCONFIG=\$IFCONFIG$I
DEST=`grep -v "^#" /etc/route.conf | grep "$INTERFACE\$" | awk '{ print $1}'`
DEFAULT=`grep -v "^#" /etc/route.conf | grep default | awk '{ print $2}'`
#echo "ok, NETDEV:$NETDEV; IFCONFIG:$IFCONFIG."
#echo " DEST: $DEST; DEFAULT: $DEFAULT"
case "$BASENAME" in
ip-up)
# default deny
#ipfwadm -I -p deny
#ipfwadm -O -p deny
# flush
#ipfwadm -I -f
#ipfwadm -O -f
# accept dns
#ipfwadm -O -a accept -P udp -S 0/0 53 1024:65535 -D 0/0 53 -W $INTERFACE
#ipfwadm -I -a accept -P udp -D 0/0 53 1024:65535 -S 0/0 53 -W $INTERFACE
#ipfwadm -O -a accept -P tcp -S 0/0 53 1024:65535 -D 0/0 53 -W $INTERFACE
#ipfwadm -I -a accept -P tcp -D 0/0 53 1024:65535 -S 00/0 53 -k -W
$INTERFACE
Erstellt von Doc Gonzo - http://kickme.to/plugins
# accept conect from client to internet
#ipfwadm -O -a accept -P tcp -S 0/0 1024:65535 -D 0/0 -W $INTERFACE
#ipfwadm -I -a accept -P tcp -D 0/0 1024:65535 -S 0/0 -k -W $INTERFACE
# deny, last match
#ipfwadm -I -a deny -P tcp -S 0/0 -D 0/0 -W $INTERFACE
#ipfwadm -I -a deny -P udp -S 0/0 -D 0/0 -W $INTERFACE
# default accept
#ipfwadm -I -p accept -W $INTERFACE
#ipfwadm -O -p accept -W $INTERFACE
/sbin/route add default gw $REMOTEIP dev $INTERFACE