blob: fdb1f5d1194a3f9568d4fc9bcf98ceed743d1319 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
<!DOCTYPE kmyfirewall-ruleset>
<kmfgrs>
<netzone guiName="Incoming Connections" id="13" name="incoming_world" description="This is the global zone that contains
all valid IP addresses." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Outgoing Connections" id="14" name="outgoing_world" description="This is the global zone that contains
all valid IP addresses." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Forbidden Clients" id="17" name="badClients_hosts" description="Hosts in this zone will not be able
to use services your computer provides." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Forbidden Servers" id="18" name="badServers_hosts" description="You will not be able to use the services
of the hosts in that list." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Malicious Hosts" id="16" name="malicious_hosts" description="Traffic coming from and going to hosts
will be dropped always." >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<netzone guiName="Trusted Hosts" id="15" name="trusted_hosts" description="Traffic coming from and going to hosts
will be accepted always.
Only add really trusted Hosts to this Zone" >
<fromIP address="0.0.0.0" />
<netMask address="0" />
</netzone>
<abstract restrictOutgoingConnections="bool:off" allowIncomingConnections="bool:offf" name="Nat Router" description="This ruleset implements that basic functionality for a NAT (Network Address Translation) Router. If you like to use your computer as the internet gateway for others in you local lan use this as a starting point." />
<logging logPrefix="KMF: " logDropped="bool:on" limitLog="bool:on" />
<icmp limitPingReply="bool:on" allowPingReply="bool:on" />
<nat natAddress="0.0.0.0" useMasquerade="bool:on" useNat="bool:on" outgoingInterface="eth0" />
</kmfgrs>
|
