Tobias Brunner
ac690f1a5e
This was from a student project that has never been developed further. And similar to the manager web application it lacks all sorts of modern standards. So just remove it and the two plugins it relied on. The test scenario is renamed to avoid confusion (neither of the two p2pnat scenarios uses medsrv/medcli).
25 lines
556 B
Plaintext
25 lines
556 B
Plaintext
*filter
|
|
|
|
# default policy is DROP
|
|
-P INPUT DROP
|
|
-P OUTPUT DROP
|
|
-P FORWARD DROP
|
|
|
|
# allow IKE
|
|
-A INPUT -i eth0 -p udp --dport 500 -j ACCEPT
|
|
-A OUTPUT -o eth0 -p udp --sport 500 -j ACCEPT
|
|
|
|
# allow MobIKE
|
|
-A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
|
|
-A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
|
|
|
|
# allow ssh
|
|
-A INPUT -p tcp --dport 22 -j ACCEPT
|
|
-A OUTPUT -p tcp --sport 22 -j ACCEPT
|
|
|
|
# allow crl fetch from winnetou
|
|
-A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT
|
|
-A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT
|
|
|
|
COMMIT
|