diff options
| author | tpearson <tpearson@283d02a7-25f6-0310-bc7c-ecb5cbfe19da> | 2010-02-17 01:04:17 +0000 |
|---|---|---|
| committer | tpearson <tpearson@283d02a7-25f6-0310-bc7c-ecb5cbfe19da> | 2010-02-17 01:04:17 +0000 |
| commit | c3b707c026782768bd8c0e6ae6b574fe8a36802d (patch) | |
| tree | 5ca6782031b1546c788290cc0b95524369ff01ea /templates/04_web_server_template.tkmfgrs | |
| download | kmyfirewall-c3b707c026782768bd8c0e6ae6b574fe8a36802d.tar.gz kmyfirewall-c3b707c026782768bd8c0e6ae6b574fe8a36802d.zip | |
Added old abandoned KDE3 version of kmyfirewall
git-svn-id: svn://anonsvn.kde.org/home/kde/branches/trinity/applications/kmyfirewall@1091559 283d02a7-25f6-0310-bc7c-ecb5cbfe19da
Diffstat (limited to 'templates/04_web_server_template.tkmfgrs')
| -rw-r--r-- | templates/04_web_server_template.tkmfgrs | 45 |
1 files changed, 45 insertions, 0 deletions
diff --git a/templates/04_web_server_template.tkmfgrs b/templates/04_web_server_template.tkmfgrs new file mode 100644 index 0000000..272e358 --- /dev/null +++ b/templates/04_web_server_template.tkmfgrs @@ -0,0 +1,45 @@ +<!DOCTYPE kmyfirewall-ruleset> +<kmfgrs> +<netzone guiName="Incoming Connections" id="13" name="incoming_world" description="This is the global zone that contains +all valid IP addresses." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +<protocol logging="no" limit="-1/" io="OUTGOING" id="19" name="HTTP" description="Protocol used to browse the WWW." > + <port protocol="TCP" num="80" /> +</protocol> +<protocol logging="yes" limit="1/second" io="OUTGOING" id="20" name="SSH" description="Protocol used to enable a secure remote shell connection." > + <port protocol="TCP" num="22" /> +</protocol> +</netzone> +<netzone guiName="Outgoing Connections" id="14" name="outgoing_world" description="This is the global zone that contains +all valid IP addresses." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Forbidden Clients" id="17" name="badClients_hosts" description="Hosts in this zone will not be able +to use services your computer provides." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Forbidden Servers" id="18" name="badServers_hosts" description="You will not be able to use the services +of the hosts in that list." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Malicious Hosts" id="16" name="malicious_hosts" description="Traffic coming from and going to hosts +will be dropped always." > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> +<netzone guiName="Trusted Hosts" id="15" name="trusted_hosts" description="Traffic coming from and going to hosts +will be accepted always. +Only add really trusted Hosts to this Zone" > + <fromIP address="0.0.0.0" /> + <netMask address="0" /> +</netzone> + <abstract restrictOutgoingConnections="bool:off" allowIncomingConnections="bool:on" name="Webserver" description="This is an example for a webserver configuration. It does only enable incomming connections to port 80 (HTTP e.g. the port webservers usually bind) and 22 (SSH e.g. for remote administration)." /> + <logging logPrefix="KMF: " logDropped="bool:on" limitLog="bool:on" /> + <icmp limitPingReply="bool:on" allowPingReply="bool:on" /> + <nat natAddress="0.0.0.0" useMasquerade="bool:off" useNat="bool:off" outgoingInterface="bool:off" /> +</kmfgrs> + |