#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#

version 5


# WAN:
interface eth5 WAN
	protection strong
	# jeglicher traffic vom server ins wan ist erlaubt:
	client all accept
	# vom wan zum server ist erlaubt:
	server ping accept
	server ssh accept
	server samba accept

# GL:
interface eth2 GL
	protection strong
	server ping accept
	server ftp accept
	server http accept
	server https accept
	server smtp accept
	client all accept
	
# CS
interface eth3 CS
#	protection strong
#	server all accept
	server ping accept
	server ssh accept
	server ftp accept
	server http accept
	server https accept
	server smtp accept
	server samba accept
	client all accept
	
# Lab
interface eth1 Lab
#	protection strong
	server ping accept
	server ftp accept
	server http accept
	server https accept
	server smtp accept
	server ping accept
	server ssh accept
	client all accept
	
# Thecus
interface eth0 Thecus
#	protection strong
	client all accept
	server samba accept
	server http accept
	server https accept
	server ping accept

# routing CS to WAN
router CS2WAN inface eth3 outface eth5
	protection strong
	masquerade
	route all accept
	
# routing GL to WAN
router GL2WAN inface eth2 outface eth5
	protection strong
	masquerade
	route all accept
	
# routing Lab to WAN
router Lab2WAN inface eth1 outface eth5
	protection strong
	masquerade 
	route all accept
	
# routing Thecus to WAN
router Thecus2WAN inface eth0 outface eth5
	protection strong
	route all deny

# routing WAN to CS
router WAN2CS inface eth5 outface eth3
	protection strong
	route all deny
	
# routing GL to CS
router GL2CS inface eth2 outface eth3
	protection strong
	route all deny
	
# routing Thecus to CS
router Thecus2CS inface eth0 outface eth3
#	protection strong
	route all accept
	
# routing Lab to CS
router Lab2CS inface eth1 outface eth3
#	protection strong
	route all accept
	route ping accept
	
# routing WAN to Thecus
router WAN2Thecus inface eth5 outface eth0
	protection strong
	route all deny

# routing GL to Thecus
router GL2Thecus inface eth2 outface eth0
	protection strong
	route all accept
	
# routing CS to Thecus
router CS2Thecus inface eth3 outface eth0
#	protection strong
#	masquerade
	route all accept
	route ping accept
#	route samba accept
	
# routing Lab to Thecus
router Lab2Thecus inface eth1 outface eth0
#	protection strong
	route all accept
	route ping accept

# routing WAN to Lab
router WAN2Lab inface eth5 outface eth1
	protection strong
	route all deny
	
# routing CS to Lab
router CS2Lab inface eth3 outface eth1
#	protection strong
	route all accept
	route ping accept
	
# routing GL to Lab
router GL2Lab inface eth2 outface eth1
	protection strong
	route all accept
	
# routing Thecus to Lab
router Thecus2Lab inface eth0 outface eth1
#	protection strong
	route all accept
	
# routing WAN to GL
router WAN2GL inface eth5 outface eth2
	protection strong
	route all deny
	
# routing CS to GL
router CS2GL inface eth3 outface eth2
	protection strong
	route all deny
	
# routing Lab to GL
router Lab2GL inface eth1 outface eth2
	protection strong
	route all deny
	
# routing Thecus to GL
router Thecus2GL
	protection strong
	route all deny