[packages/filtergen.git] / filter.conf

# Simple filter configuration file
# allows to use HTTP, HTTPS, NNTP, POP3, DNS, ssh, CVS and ident services
# useful for typical developer machine on a dial-up connection.

{input lo; output lo} accept;

output ppp0 {
	proto tcp {
		dport { ssh http https nntp pop3 domain cvspserver } accept;
		drop;
	};
	proto udp dport domain accept;
	drop;
};

input ppp0 {
	proto tcp { 
      dport { auth } accept;
		drop;
	};
	drop;
};
Commit	Line	Data
99404a34	1	# Simple filter configuration file
	2	# allows to use HTTP, HTTPS, NNTP, POP3, DNS, ssh, CVS and ident services
	3	# useful for typical developer machine on a dial-up connection.
	4
	5	{input lo; output lo} accept;
	6
	7	output ppp0 {
	8	proto tcp {
	9	dport { ssh http https nntp pop3 domain cvspserver } accept;
	10	drop;
	11	};
	12	proto udp dport domain accept;
	13	drop;
	14	};
	15
	16	input ppp0 {
	17	proto tcp {
	18	dport { auth } accept;
	19	drop;
	20	};
	21	drop;
	22	};