ORIG_FW_CONFIG='no'                 # use old style packet filter
				    # config: yes or no

INPUT_POLICY='REJECT'           # be nice and use reject as policy
INPUT_ACCEPT_DEF='yes'          # use default rule set
INPUT_LOG='no'                  # don't log anything
INPUT_LOG_LIMIT='3/minute 5'    # log 3 events per minute; allow a
				    # burst of 5 events
INPUT_LIST_N='3'
INPUT_LIST_1='IP_NET_1 ACCEPT'  # allow all hosts in the local
INPUT_LIST_2='IP_NET_2 ACCEPT'  # network access to the router
INPUT_LIST_3='IP_NET_3 ACCEPT'

FORWARD_POLICY='REJECT'         # be nice and use reject as policy
FORWARD_ACCEPT_DEF='yes'        # use default rule set
FORWARD_LOG='no'                # don't log anything
FORWARD_LOG_LIMIT='3/minute 5'  # log 3 events per minute; allow a
				    # burst of 5 events
FORWARD_LIST_N='6'
#FORWARD_LIST_1='IP_NET_1 IP_NET_2 ACCEPT BIDIRECTIONAL'
#FORWARD_LIST_2='IP_NET_1 IP_NET_3 ACCEPT BIDIRECTIONAL'                                     # to leave the subnet
FORWARD_LIST_1='prot:udp 137-138 DROP'    
FORWARD_LIST_2='prot:tcp 139 DROP'
FORWARD_LIST_3='prot:tcp 445 DROP'
FORWARD_LIST_4='IP_NET_1 ACCEPT' # accept everything else
FORWARD_LIST_5='IP_NET_2 ACCEPT'
FORWARD_LIST_6='IP_NET_3 ACCEPT'

POSTROUTING_LIST_N='3'
#POSTROUTING_LIST_1='IP_NET_1 IP_NET_2 ACCEPT BIDIRECTIONAL'
#POSTROUTING_LIST_2='IP_NET_1 IP_NET_3 ACCEPT BIDIRECTIONAL'
POSTROUTING_LIST_1='IP_NET_1 MASQUERADE' # masquerade traffic leaving
POSTROUTING_LIST_2='IP_NET_2 MASQUERADE'                                 # the subnet
POSTROUTING_LIST_3='IP_NET_3 MASQUERADE'                                 # the subnet


#------------------------------------------------------------------------------
# Simple DMZ setup for dial-up based routers -- see documentation
#------------------------------------------------------------------------------
OPT_DMZ='yes'
DMZ_LOG='no'
DMZ_RED_DEV='ppp0'
DMZ_ORANGE_RED_N='0'
DMZ_ORANGE_RED_1='prot:tcp 80 ACCEPT'


#------------------------------------------------------------------------------
# Optional package: PORTFW
#------------------------------------------------------------------------------
PORTFW_N='0'                          # how many portforwardings to set up