The firewall scripts files
if [ ${NETWORKING} = “no” ]
then
exitO fi
if [! -x /sbin/ipchains ]; then
exitO fi
# See how we were called,
case “$1″ in
start)
echo -n “Starting Firewalling Services:”
# Some definitions for easy maintenance.
# EDIT THESE TO SUIT YOUR SYSTEM AND ISP.
EXTERNAL_INTERFACE=”ethO”
LOOPBACK_INTERFACE=”lo”
IPADDR=”my.ip.address”
ANYWHERE=”any/0″
NAMESERVERJ =”my.name.server. 1″
NAMESERVER_2=”my.name.server.2″
MY_ISP=”my.isp.address.range/24″
SMTP_SERVER=”my.smtp.server”
SYSLOG_SERVER=”syslog.internal.server”
SYSLOG_CLIENT=”sys.int.client.range/24″
LOOPBACK=”127.0.0.0/8″ CLASS_A=”10.0.0.0/8″ CLASS_B=”172.16.0.0/12″ CLASS_C=”192.168.0.0/16″ CLASS D MULTICAST=”224.0.0.0/4″
CLASS_E_RESERVED_NET=”240.0.0.0/5″ # Class E reserved addresses
BROADCAST_SRC=”0.0.0.0″ # Broadcast source address
BROADCAST_DEST=”255.255.255.255″ # Broadcast destination address
PRIVPORTS=”0:1023″ # Well known, privileged port range
UNPRIVPORTS=”1024:65535″ # Unprivileged port range
# SSH starts at 1023 and works down to 513 for
# each additional simultaneous incoming connection.
SSH_PORTS=”1022:1023″ # range for SSH privileged ports
# traceroute usually uses -S 32769:65535 -D 33434:33523
TRACEROUTE_SRC_PORTS=”32769:65535″
TRACEROUTE_DEST_PORTS=”33434:33523″
# Default policy is DENY
# Explicitly accept desired INCOMING & OUTGOING connections