Added again 172.16.0.0/12 to PRIVATE_IPS.

This commit is contained in:
ktsaou 2003-11-03 20:43:09 +00:00
parent 9c18b47216
commit e1b91cf240
2 changed files with 55 additions and 8 deletions

@ -1,7 +1,7 @@
RCS file: /cvsroot/firehol/firehol/firehol.sh,v
Working file: firehol.sh
head: 1.159
head: 1.166
branch:
locks: strict
access list:
@ -9,9 +9,56 @@ symbolic names:
start: 1.1.1.1
vendor: 1.1.1
keyword substitution: kv
total revisions: 160; selected revisions: 160
total revisions: 167; selected revisions: 167
description:
----------------------------
revision 1.166
date: 2003/10/26 21:40:30; author: ktsaou; state: Exp; lines: +67 -56
Fixed PRIVATE_IPS (there was an duplicate entry and a wrong entry).
----------------------------
revision 1.165
date: 2003/10/26 21:27:31; author: ktsaou; state: Exp; lines: +102 -8
Changed kernel module management to read kernel configuration and detect
if a module is compiled in the kernel or needs to be loaded separately.
(note: this is not finished yet)
----------------------------
revision 1.164
date: 2003/10/22 06:58:27; author: ktsaou; state: Exp; lines: +6 -6
Changed TIME service ports to numeric since a few versions of bash get
confused by the use of the reserved keywork "time".
----------------------------
revision 1.163
date: 2003/10/20 17:49:56; author: ktsaou; state: Exp; lines: +7 -7
Fixed service CUPS according to the following:
> The firehol system defines the 'cups' protocol as:
>
> server_cups_ports="tcp/631"
> client_cups_ports="default"
>
> This isn't a complete definition - CUPS also has an internal printer
> browsing protocol that operates over UDP, on port 631.
>
> The following definition is more correct:
>
> server_cups_ports="tcp/631 udp/631"
> client_cups_ports="default 631"
----------------------------
revision 1.162
date: 2003/10/18 09:40:45; author: ktsaou; state: Exp; lines: +8 -5
Added Distributed Checksum Clearinghouses (DCC) service.
----------------------------
revision 1.161
date: 2003/10/16 22:05:22; author: ktsaou; state: Exp; lines: +194 -84
Added the PHYSIN and PHYSOUT optional rule parameters to match the
physical network interface in cases where iptables defines as inface
and outface a virtual interface such as a bridge.
----------------------------
revision 1.160
date: 2003/10/13 18:50:30; author: ktsaou; state: Exp; lines: +13 -5
Added services ORACLE and GKRELLMD.
----------------------------
revision 1.159
date: 2003/10/09 10:01:26; author: ktsaou; state: Exp; lines: +9 -5
Added service Veritas NetBackup.

@ -10,7 +10,7 @@
#
# config: /etc/firehol/firehol.conf
#
# $Id: firehol.sh,v 1.166 2003/10/26 21:40:30 ktsaou Exp $
# $Id: firehol.sh,v 1.167 2003/11/03 20:43:09 ktsaou Exp $
#
# Remember who you are.
@ -96,7 +96,7 @@ RESERVED_IPS="0.0.0.0/7 2.0.0.0/8 5.0.0.0/8 7.0.0.0/8 23.0.0.0/8 27.0.0.0/8 31.0
# 192.0.2.0/24 => Test Net
# 192.88.99.0/24 => RFC 3068: 6to4 anycast & RFC 2544: Benchmarking addresses
# 192.168.0.0/16 => RFC 1918: Private use
PRIVATE_IPS="10.0.0.0/8 169.254.0.0/16 192.0.2.0/24 192.88.99.0/24 192.168.0.0/16"
PRIVATE_IPS="10.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.0.2.0/24 192.88.99.0/24 192.168.0.0/16"
# The multicast address space
MULTICAST_IPS="224.0.0.0/8"
@ -3933,7 +3933,7 @@ case "${arg}" in
else
${CAT_CMD} <<EOF
$Id: firehol.sh,v 1.166 2003/10/26 21:40:30 ktsaou Exp $
$Id: firehol.sh,v 1.167 2003/11/03 20:43:09 ktsaou Exp $
(C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
FireHOL is distributed under GPL.
@ -4119,7 +4119,7 @@ then
${CAT_CMD} <<EOF
$Id: firehol.sh,v 1.166 2003/10/26 21:40:30 ktsaou Exp $
$Id: firehol.sh,v 1.167 2003/11/03 20:43:09 ktsaou Exp $
(C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
FireHOL is distributed under GPL.
Home Page: http://firehol.sourceforge.net
@ -4414,7 +4414,7 @@ then
${CAT_CMD} >&2 <<EOF
$Id: firehol.sh,v 1.166 2003/10/26 21:40:30 ktsaou Exp $
$Id: firehol.sh,v 1.167 2003/11/03 20:43:09 ktsaou Exp $
(C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
FireHOL is distributed under GPL.
Home Page: http://firehol.sourceforge.net
@ -4497,7 +4497,7 @@ EOF
echo "# "
${CAT_CMD} <<EOF
# $Id: firehol.sh,v 1.166 2003/10/26 21:40:30 ktsaou Exp $
# $Id: firehol.sh,v 1.167 2003/11/03 20:43:09 ktsaou Exp $
# (C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
# FireHOL is distributed under GPL.
# Home Page: http://firehol.sourceforge.net