]> git.ipfire.org Git - people/stevee/network.git/blobdiff - functions.constants-firewall
aiccu: Implement optional SSL encrytion.
[people/stevee/network.git] / functions.constants-firewall
index 1292429e9149e2e9a8d6f021094845f1e7f044d8..d1fab5d5a875685530b7142a25d6390034ccaec3 100644 (file)
@@ -34,14 +34,26 @@ FIREWALL_MACROS_DIRS="${FIREWALL_MACROS_DIRS} /usr/share/firewall/macros"
 # List of parameters which are saved in the configuration file.
 FIREWALL_CONFIG_PARAMS=""
 
+# Valid arguments in the rules file.
+FIREWALL_RULES_CONFIG_PARAMS="src dst proto action sport dport in out"
+
 # Define the default logging method (nflog or syslog).
 FIREWALL_LOG_METHOD="nflog"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_LOG_METHOD"
 
 # Set the default threshold for the nflog method.
 FIREWALL_NFLOG_THRESHOLD=30
-FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_NFLOG_THREASHOLD"
+FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_NFLOG_THRESHOLD"
 
 # Enable clamping MSS for braindead ISPs which filter ICMP packets.
 FIREWALL_CLAMP_PATH_MTU="false"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_CLAMP_PATH_MTU"
+
+FIREWALL_SUPPORTED_PROTOCOLS="tcp udp icmp igmp esp ah gre"
+FIREWALL_PROTOCOLS_SUPPORTING_PORTS="tcp udp"
+
+# Firewall zone settings.
+FIREWALL_ZONE_SETTINGS="FRIEND_ZONES MASQUERADE4"
+
+# Default values.
+FIREWALL_ZONE_SETTINGS_MASQUERADE4="false"