2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2012 IPFire Network Development Team #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
22 # This variable is used to point to a directory
23 # in which the iptables ruleset will be generated.
26 FIREWALL_CONFIG_DIR
="/etc/firewall"
27 FIREWALL_ZONES_DIR
="${FIREWALL_CONFIG_DIR}/zones"
28 FIREWALL4_CONFIG_FILE
="${FIREWALL_CONFIG_DIR}/config4"
29 FIREWALL6_CONFIG_FILE
="${FIREWALL_CONFIG_DIR}/config6"
30 FIREWALL_CONFIG_RULES
="${FIREWALL_CONFIG_DIR}/rules"
32 FIREWALL_MACROS_DIRS
="${FIREWALL_CONFIG_DIR}/macros"
33 FIREWALL_MACROS_DIRS
="${FIREWALL_MACROS_DIRS} /usr/share/firewall/macros"
35 # List of parameters which are saved in the configuration file.
36 FIREWALL_CONFIG_PARAMS
=""
38 # Valid arguments in the rules file.
39 FIREWALL_RULES_CONFIG_PARAMS
="src dst proto action sport dport in out"
41 # Define the default logging method (nflog or syslog).
42 FIREWALL_LOG_METHOD
="nflog"
43 FIREWALL_CONFIG_PARAMS
="${FIREWALL_CONFIG_PARAMS} FIREWALL_LOG_METHOD"
45 # Set the default threshold for the nflog method.
46 FIREWALL_NFLOG_THRESHOLD
=30
47 FIREWALL_CONFIG_PARAMS
="${FIREWALL_CONFIG_PARAMS} FIREWALL_NFLOG_THRESHOLD"
49 # Enable clamping MSS for braindead ISPs which filter ICMP packets.
50 FIREWALL_CLAMP_PATH_MTU
="false"
51 FIREWALL_CONFIG_PARAMS
="${FIREWALL_CONFIG_PARAMS} FIREWALL_CLAMP_PATH_MTU"
53 FIREWALL4_CONFIG_PARAMS
="${FIREWALL_CONFIG_PARAMS}"
54 FIREWALL6_CONFIG_PARAMS
="${FIREWALL_CONFIG_PARAMS}"
56 FIREWALL_SUPPORTED_PROTOCOLS
="tcp udp icmp igmp esp ah gre"
57 FIREWALL_PROTOCOLS_SUPPORTING_PORTS
="tcp udp"
59 # Firewall zone settings.
60 FIREWALL_ZONE_SETTINGS
="FRIEND_ZONES MASQUERADE4"
63 FIREWALL_ZONE_SETTINGS_MASQUERADE4
="false"