version 5

if_lan="eth_lan"
if_internet="eth_inet"

FIREHOL_LOG_MODE="ULOG"

# Port forwarding
dnat to 10.1.3.1 inface ${if_internet} proto tcp dport 6881:6999  # Mike BT
dnat to 10.1.3.1 inface ${if_internet} proto udp dport 6881:6999  # Mike BT

# Firewall for traffic hitting oversoul itself from the Internet
interface ${if_internet} world
        policy reject
        protection full
        server ping accept
        server ssh accept
        server http accept
        # server openvpn accept
        client all accept

# Firewall for traffic hitting oversoul itself from the LAN
interface ${if_lan} lan
        policy reject
        protection full
        server ping accept
        server dhcp accept
        server dns accept
        server ssh accept
        server http accept
        server cups accept
        server samba accept
        client all accept

# Router for masquerading traffic from the LAN to the Internet
router masq inface ${if_lan} outface ${if_internet}
        protection full
        masquerade
        server all accept

# Router for port-forwarded traffic coming from the Internet
router services inface ${if_internet} outface ${if_lan}
        protection full
        server all accept