Add 'allow_to_ext_net' and 'allow_to_ext_service'.

conf/main_ipv4.conf.sample

@@ -382,6 +382,50 @@ allow_local_net_to_ext_net=""
 
 
 
+# =============
+# - Allow extern service
+# =============
+
+# - allow_to_ext_service
+# -
+# - allow_to_ext_service="<ext-ip:port:protocol> [ext-ip:port:protocol> [.."
+# -
+# - All traffic to the given (extern) service is allowed
+# -
+# - Example:
+# -   allow_to_ext_service="83.223.86.98:3306:tcp
+# -                         83.223.86.98:10194:udp"
+# -
+# - Blank separated list
+# -
+allow_to_ext_service=""
+
+
+
+# =============
+# - Allow extern network
+# =============
+
+
+# - allow_to_ext_net
+# -
+# - Allow all traffic to given extern network
+# -
+# - allow_to_ext_net="<ext-net> [<ext-net> [.."
+# -
+# - All traffic to the given (extern) network is allowed
+# -
+# - Example:
+# -   allow_to_ext_net="83.223.86.98/32
+# -                     83.223.86.101/32
+# -                     192.68.11.81/27"
+# -
+# - Blank separated list
+# -
+allow_to_ext_net=""
+
+
+
 # =============
 # --- Separate local Networks
 # =============

conf/main_ipv6.conf.sample

@@ -370,6 +370,50 @@ allow_local_net_to_ext_net=""
 
 
 
+# =============
+# - Allow extern service
+# =============
+
+# - allow_to_ext_service
+# -
+# - Allow all traffic to given extern service
+# -
+# - allow_to_ext_service="<ext-ip,port,protocol> [ext-ip,port,protocol> [.."
+# -
+# - All traffic to the given (extern) service is allowed
+# -
+# - Example:
+# -   allow_to_ext_service="2a01:30:0:13:211:84ff:feb7:7f9c,3306,tcp
+# -                         2a01:30:0:13:211:84ff:feb7:7f9c,10194,tcp"
+# -
+# - Blank separated list
+# -
+allow_to_ext_service=""
+
+
+
+# =============
+# - Allow extern network
+# =============
+
+# - allow_to_ext_net
+# -
+# - Allow all traffic to given extern network
+# -
+# - allow_to_ext_net="<local-net,ext-net> [<local-net,ext-net> [.."
+# -
+# - All traffic from the given (local) network to the given (extern) network is allowed
+# -
+# - Example:
+# -   allow_to_ext_net="2a01:30:0:13:211:84ff:feb7:7f9c/64
+# -                     2001:678:a40:3000::/64"
+# -
+# - Blank separated list
+# -
+allow_to_ext_net=""
+
+
+
 # =============
 # --- Separate local Networks
 # =============

conf/post_decalrations.conf

@@ -197,6 +197,22 @@ for _val in $allow_local_net_to_ext_net ; do
    allow_local_net_to_ext_net_arr+=("$_val")
 done
 
+# ---
+# - Allow extern service
+# ---
+declare -a allow_to_ext_service_arr
+for _val in $allow_to_ext_service ; do
+   allow_to_ext_service_arr+=("$_val")
+done
+
+# ---
+# - Allow extern network
+# ---
+declare -a allow_to_ext_net_arr
+for _val in $allow_to_ext_net ; do
+   allow_to_ext_net_arr+=("$_val")
+done
+
 # ---
 # - Separate local Networks
 # ---