3 # Configuration file for ferm(1).
11 mod state state INVALID DROP;
12 mod state state (ESTABLISHED RELATED) ACCEPT;
21 proto udp dport 500 ACCEPT;
22 proto (esp ah) ACCEPT;
24 proto tcp dport ssh ACCEPT;
27 proto tcp dport 1235 ACCEPT;
29 proto (tcp udp) dport ( kerberos afs3-callback ) ACCEPT;
32 @include 'local_ports_in.conf';
33 #@include 'users_tcp_in.conf'
39 #mod state state INVALID DROP;
40 mod state state (ESTABLISHED RELATED) ACCEPT;
42 proto tcp dport ssh ACCEPT;
44 # connections to domtool dispatcher and slaves (for e.g. QFoo)
45 proto tcp dport 1234 ACCEPT;
46 proto tcp dport 1235 ACCEPT;
48 proto (tcp udp) dport ( kerberos afs3-fileserver afs3-callback afs3-prserver afs3-vlserver afs3-volser afs3-errors afs3-bos ) ACCEPT;
50 proto (tcp udp) dport ntp ACCEPT;
51 proto (tcp udp) dport domain ACCEPT;
53 # root needs port 80 for things like apt-get
54 mod owner uid-owner 0 { proto (tcp) dport (http https) ACCEPT; }
56 @include 'local_ports_out.conf';
57 #include 'users_tcp_out.conf'
63 mod state state INVALID DROP;
64 mod state state (ESTABLISHED RELATED) ACCEPT;
68 #include 'user_chains.conf'