#
# Shorewall 1.2 /etc/shorewall/params
#
# Sample for a standalone system.
#
# This configuration is suitable for systems with a single internet interface.
##############################################################################
#
# Specify the name of your internet interface in the following variable.
#
# If you access the internet via dial-up, the interface name with be ppp0
# If you have an ethernet interface to the internet, your interface name will
# be eth0.

NET_IF=eth0

# Specify the broadcast address for your network interface here. If your
# internet interface is point-to-point (such as with dial-up), then set this
# to "-". If you want Shorewall to automatically detect the broadcast address,
# you can set the variable to "detect"; you will have to start your network
# interface before starting Shorewall for this to work.

NET_BCAST=detect

#
# Specify the interface options in this variable as a comma-separated list.
#
# Possible options are as follows:
#			dhcp	     - interface is managed by DHCP
#			noping	     - icmp echo-request (ping) packets should
#				       be ignored on this interface
#			routestopped - When the firewall is stopped, allow
#				       and route traffic to and from this
#				       interface.
#			norfc1918    - This interface should not receive
#				       any packets whose source is in one
#				       of the ranges reserved by RFC 1918
#				       (i.e., private or "non-routable"
#				       addresses.
#			multi	     - This interface has multiple IP
#				       addresses and you want to be able to
#				       route between them.
#			routefilter  - turn on kernel route filtering for this
#				       interface.
#

NET_OPTIONS=dhcp,noping,norfc1918

#
# If you wish to "open" incoming TCP ports, list them in this variable as a
# comma-separated list. For example, if you want to enable secure shell (ssh) and FTP,
# you would have (TCP_PORTS=ssh,ftp or TCP_PORTS=22,21).
#
# If you don't want to open any TCP ports, use the value "none"

TCP_PORTS=none

#
# If you wish to "open" incoming UDP ports, list them in this variable as a
# comma-separated list.
#
# If you don't want to open any TCP ports, use the value "none"

UDP_PORTS=none

#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
