diff --git a/ip6t-firewall-server.conf.sample b/ip6t-firewall-server.conf.sample index 43eb660..ee315e7 100644 --- a/ip6t-firewall-server.conf.sample +++ b/ip6t-firewall-server.conf.sample @@ -35,7 +35,7 @@ log_blocked=false log_unprotected=false log_prohibited=false log_voip=false -log_rejected=true +log_rejected=false log_ssh=false @@ -248,10 +248,18 @@ restrict_local_net_to_net="" # - are allowed # - # - Example: -# - allow_ext_service=" -# - 2a01:4f8:221:3b4e::247,8443,tcp -# - 2a01:30:0:13:211:84ff:feb7:7f9c,8443,tcp -# - " +# - - allow_ext_service=" +# - 2a01:4f8:221:3b4e::247,8443,tcp +# - 2a01:30:0:13:211:84ff:feb7:7f9c,8443,tcp +# - " +# - - allow_ext_service=" +# - ::/0,8443,tcp +# - ::/0,8080,tcp +# - " +# - +# - Note: +# - ===== +# - To allow traffic on a certain port to all extern networks, set extern network to '::/0' # - # - Blank separated list # - @@ -269,7 +277,12 @@ allow_ext_service="" # - Allow all traffic to the given extern network/ip-address. # - # - Example: -# - allow_ext_net="2a01:4f8:221:3b4e::247 2a01:30:0:13:211:84ff:feb7:7f9c" +# - - allow_ext_net="2a01:4f8:221:3b4e::247 2a01:30:0:13:211:84ff:feb7:7f9c" +# - - allow_ext_net="::/0" +# - +# - Note: +# - ===== +# - To allow traffic to all extern networks, set extern network to '::/0' # - # - Blank separated list # - diff --git a/ipt-firewall-server.conf.sample b/ipt-firewall-server.conf.sample index 5c2dd4f..2a3dd9f 100644 --- a/ipt-firewall-server.conf.sample +++ b/ipt-firewall-server.conf.sample @@ -251,10 +251,18 @@ restrict_local_net_to_net="" # - are allowed # - # - Example: -# - allow_ext_service=" -# - 80.152.216.128:9998:tcp -# - 80.152.216.128:8443:tcp -# - " +# - - allow_ext_service=" +# - 80.152.216.128:9998:tcp +# - 80.152.216.128:8443:tcp +# - " +# - - allow_ext_service=" +# - 0/0:8443:tcp +# - 0/0:8080:tcp +# - " +# - +# - Note: +# - ===== +# - To allow traffic on a certain port to all extern networks, set extern network to '0/0' # - # - Blank separated list # - @@ -272,7 +280,12 @@ allow_ext_service="" # - Allow all traffic to the given extern network/ip-address. # - # - Example: -# - allow_ext_net="80.152.216.128 84.140.157.102" +# - - allow_ext_net="80.152.216.128 84.140.157.102" +# - - allow_ext_net="0/0" +# - +# - Note: +# - ===== +# - To allow traffic to all extern networks, set extern network to '0/0' # - # - Blank separated list # -