Technical data
3. Base configuration
IP_ROUTE_2='0.0.0.0/0 192.168.6.99'
# example for default-route
#------------------------------------------------------------------------------
# Packet filter configuration
#------------------------------------------------------------------------------
PF_INPUT_POLICY='REJECT' # be nice and use reject as policy
PF_INPUT_ACCEPT_DEF='yes' # use default rule set
PF_INPUT_LOG='no' # don't log at all
PF_INPUT_LOG_LIMIT='3/minute:5' # log 3 events per minute; allow a burst of 5
# events
PF_INPUT_REJ_LIMIT='1/second:5' # reject 1 connection per second; allow a burst
# of 5 events; otherwise drop packet
PF_INPUT_UDP_REJ_LIMIT='1/second:5'
# reject 1 udp packet per second; allow a burst
# of 5 events; otherwise drop packet
PF_INPUT_N='1' # number of INPUT rules
PF_INPUT_1='IP_NET_1 ACCEPT' # allow all hosts in the local network to
# access the router
PF_INPUT_2='tmpl:samba DROP NOLOG'
# drop (or reject) samba access
PF_INPUT_2_COMMENT='no samba traffic allowed'
# without logging, otherwise the log file will
# be filled with useless entries
PF_FORWARD_POLICY='REJECT' # be nice and use reject as policy
PF_FORWARD_ACCEPT_DEF='yes' # use default rule set
PF_FORWARD_LOG='no' # don't log at all
PF_FORWARD_LOG_LIMIT='3/minute:5'
# log 3 events per minute; allow a burst of 5
# events
PF_FORWARD_REJ_LIMIT='1/second:5'
# reject 1 connection per second; allow a burst
# of 5 events; otherwise drop packet
PF_FORWARD_UDP_REJ_LIMIT='1/second:5'
# reject 1 udp packet per second; allow a burst
# of 5 events; otherwise drop packet
PF_FORWARD_N='2' # number of FORWARD rules
PF_FORWARD_1='tmpl:samba DROP' # drop samba traffic if it tries to leave the
# subnet
PF_FORWARD_2='IP_NET_1 ACCEPT' # accept everything else
PF_OUTPUT_POLICY='ACCEPT' # default policy for outgoing packets
PF_OUTPUT_ACCEPT_DEF='yes' # use default rule set
PF_OUTPUT_LOG='no' # don't log at all
PF_OUTPUT_LOG_LIMIT='3/minute:5'
# log 3 events per minute; allow a burst of 5
# events
PF_OUTPUT_REJ_LIMIT='1/second:5'
# reject 1 connection per second; allow a burst
# of 5 events; otherwise drop packet
PF_OUTPUT_UDP_REJ_LIMIT='1/second:5'
21