You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
kmyfirewall/templates/03_nat_router_template.tkmfgrs

40 lines
1.9 KiB

<!DOCTYPE kmyfirewall-ruleset>
<kmfgrs>
<netzone guiName="Incoming Connections" id="13" name="incoming_world" description="This is the global zone that contains
all valid IP addresses." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Outgoing Connections" id="14" name="outgoing_world" description="This is the global zone that contains
all valid IP addresses." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Forbidden Clients" id="17" name="badClients_hosts" description="Hosts in this zone will not be able
to use services your computer provides." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Forbidden Servers" id="18" name="badServers_hosts" description="You will not be able to use the services
of the hosts in that list." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Malicious Hosts" id="16" name="malicious_hosts" description="Traffic coming from and going to hosts
will be dropped always." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Trusted Hosts" id="15" name="trusted_hosts" description="Traffic coming from and going to hosts
will be accepted always.
Only add really trusted Hosts to this Zone" >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<abstract restrictOutgoingConnections="bool:off" allowIncomingConnections="bool:offf" name="Nat Router" description="This ruleset implements that basic functionality for a NAT (Network Address Translation) Router. If you like to use your computer as the internet gateway for others in you local lan use this as a starting point." />
<logging logPrefix="KMF: " logDropped="bool:on" limitLog="bool:on" />
<icmp limitPingReply="bool:on" allowPingReply="bool:on" />
<nat natAddress="0.0.0.0" useMasquerade="bool:on" useNat="bool:on" outgoingInterface="eth0" />
</kmfgrs>