Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 192 / 450

FW_MASQ_NETS
(masquerading)
Specify the hosts or networks to masquerade, leaving a space between the individ-
ual entries. For example:
FW_MASQ_NETS="192.168.0.0/24 192.168.10.1"
FW_PROTECT_FROM_INT
(firewall)
Set this to
yes
to protect your firewall host from attacks originating in your internal
network. Services are only available to the internal network if explicitly enabled.
Also see
FW_SERVICES_INT_TCP
and
FW_SERVICES_INT_UDP
.
FW_SERVICES_EXT_TCP
(firewall)
Enter the TCP ports that should be made available. Leave this blank for a normal
workstation at home that should not offer any services.
FW_SERVICES_EXT_UDP
(firewall)
Leave this blank unless you run a UDP service and want to make it available to
the outside. The services that use UDP include include DNS servers, IPsec, TFTP,
DHCP and others. In that case, enter the UDP ports to use.
FW_SERVICES_ACCEPT_EXT
(firewall)
List services to allow from the Internet. This is a more generic form of the
FW_SERVICES_EXT_TCP
and
FW_SERVICES_EXT_UDP
settings, and more
specific than
FW_TRUSTED_NETS
. The notation is a space-separated list of
net , protocol [, dport ][, sport ]
, for example
0/0,tcp,22
.
FW_SERVICES_INT_TCP
(firewall)
With this variable, define the services available for the internal network. The nota-
tion is the same as for
FW_SERVICES_EXT_TCP
, but the settings are applied to
the internal network. The variable only needs to be set if
FW_PROTECT_FROM_INT
is set to
yes
.
FW_SERVICES_INT_UDP
(firewall)
See
FW_SERVICES_INT_TCP
.
FW_SERVICES_ACCEPT_INT
(firewall)
List services to allow from internal hosts. See
FW_SERVICES_ACCEPT_EXT.
178 Security Guide