Technical data

3. Base conﬁguration

# reject 1 udp packet per second; allow a burst

# of 5 events; otherwise drop packet

PF_OUTPUT_N='0' # number of OUTPUT rules

PF_POSTROUTING_N='1' # number of POSTROUTING rules

PF_POSTROUTING_1='IP_NET_1 MASQUERADE'

# masquerade traffic leaving the subnet

PF_PREROUTING_N='0' # number of PREROUTING rules

PF_PREROUTING_1='1.2.3.4 dynamic:22 DNAT:@client2'

# forward ssh connections coming from 1.2.3.4

# to client2

PF_PREROUTING_CT_ACCEPT_DEF='yes'

# use default rule set

PF_PREROUTING_CT_N='1' # number of conntrack PREROUTING rules

PF_PREROUTING_CT_1='tmpl:ftp IP_NET_1 HELPER:ftp'

# associate FTP conntrack helper for active FTP

# forwarded from within the LAN

PF_PREROUTING_CT_2='tmpl:ftp any dynamic HELPER:ftp'

# associate FTP conntrack helper for active FTP

# forwarded to the router's external IP

PF_OUTPUT_CT_ACCEPT_DEF='yes' # use default rule set

PF_OUTPUT_CT_N='0' # number of conntrack OUTPUT rules

PF_OUTPUT_CT_1='tmpl:ftp HELPER:ftp'

# associate FTP conntrack helper for outgoing

# active FTP on the router (this rule is added

# automatically by the tools package if

# OPT_FTP='yes' and FTP_PF_ENABLE_ACTIVE='yes')

PF_USR_CHAIN_N='0' # number of user-defined rules

#------------------------------------------------------------------------------

# Domain configuration:

# settings for DNS, DHCP server and HOSTS -> see package DNS_DHCP

#------------------------------------------------------------------------------

DOMAIN_NAME='lan.fli4l' # your domain name

DNS_FORWARDERS='194.8.57.8' # DNS servers of your provider,

# e.g. ns.n-ix.net

# optional configuration for the host-entry of the router in /etc/hosts

#HOSTNAME_IP='IP_NET_1_IPADDR' # IP to bind to HOSTNAME

#HOSTNAME_ALIAS_N='0' # how many ALIAS names for the router

#HOSTNAME_ALIAS_1='router.lan.fli4l'

# first ALIAS name

#HOSTNAME_ALIAS_2='gateway.my.lan'

# secound ALIAS name

#------------------------------------------------------------------------------

# imond configuration:

#------------------------------------------------------------------------------

START_IMOND='no' # start imond: yes or no