Commit 1361a8ba authored by Cédric BRINER's avatar Cédric BRINER Committed by Cédric BRINER
Browse files

better documentation

parent c42b93d9
......@@ -388,23 +388,27 @@ eof
function doc_ipf6()
{
cat << EOF
# -----------------------------------------
#----------------------------------------------
# ipv6
cd /etc/ipf
saveback ipf6.conf
vim ipf6.con6
vim ipf6.conf
# enable IN rules and be polite inside our network with
block return-rst in quick proto tcp from 2001:620:600::0/48 to <thishost> head i_global
block return-rst in quick proto tcp from fd69:620:600::0/48 to <thishost> head i_global
block in quick from any to <thishost> head i_global
# enable OUT rules
block out quick from <thishost> to any head o_global
# for eg allow http and https with respectively i_global & o_global
pass in quick proto tcp from any to any port = 80 group i_global
pass in quick proto tcp from any to any port = 443 group i_global
pass out quick proto tcp from any port = 80 to any group o_global
pass out quick proto tcp from any port = 443 to any group o_global
#----------------------------------------------
EOF
}
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment