diff options
Diffstat (limited to 'templates/03_nat_router_template.tkmfgrs')
| -rw-r--r-- | templates/03_nat_router_template.tkmfgrs | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/templates/03_nat_router_template.tkmfgrs b/templates/03_nat_router_template.tkmfgrs new file mode 100644 index 0000000..fdb1f5d --- /dev/null +++ b/templates/03_nat_router_template.tkmfgrs @@ -0,0 +1,39 @@ +<!DOCTYPE kmyfirewall-ruleset> +<kmfgrs> +<netzone guiName="Incoming Connections" id="13" name="incoming_world" description="This is the global zone that contains +all valid IP addresses." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Outgoing Connections" id="14" name="outgoing_world" description="This is the global zone that contains +all valid IP addresses." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Forbidden Clients" id="17" name="badClients_hosts" description="Hosts in this zone will not be able +to use services your computer provides." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Forbidden Servers" id="18" name="badServers_hosts" description="You will not be able to use the services +of the hosts in that list." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Malicious Hosts" id="16" name="malicious_hosts" description="Traffic coming from and going to hosts +will be dropped always." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Trusted Hosts" id="15" name="trusted_hosts" description="Traffic coming from and going to hosts +will be accepted always. +Only add really trusted Hosts to this Zone" > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> + <abstract restrictOutgoingConnections="bool:off" allowIncomingConnections="bool:offf" name="Nat Router" description="This ruleset implements that basic functionality for a NAT (Network Address Translation) Router. If you like to use your computer as the internet gateway for others in you local lan use this as a starting point." /> + <logging logPrefix="KMF: " logDropped="bool:on" limitLog="bool:on" /> + <icmp limitPingReply="bool:on" allowPingReply="bool:on" /> + <nat natAddress="0.0.0.0" useMasquerade="bool:on" useNat="bool:on" outgoingInterface="eth0" /> +</kmfgrs> + |