2005-05-17 01:37:23 +02:00
|
|
|
# this file is not parsed, but simply sourced
|
|
|
|
|
|
|
|
# the source interface (only these packets will be filtered)
|
|
|
|
IF_SRC=eth1
|
|
|
|
|
2005-05-17 12:11:28 +02:00
|
|
|
# intern IP address auf the network, where web-splash will be used
|
|
|
|
INTERN_IP=192.168.1.1
|
2005-05-17 01:37:23 +02:00
|
|
|
|
2005-05-17 02:39:58 +02:00
|
|
|
# name of the local file that should be displayed by the cgi
|
2005-05-18 05:31:27 +02:00
|
|
|
SPLASH_DOCUMENT=/www/web-splash/splash-info.html
|
2005-05-17 02:39:58 +02:00
|
|
|
|
2005-05-18 05:31:27 +02:00
|
|
|
# allowed and denied IPs - separated by spaces
|
2005-05-17 12:11:28 +02:00
|
|
|
ALLOW_IP_LIST=""
|
|
|
|
DENY_IP_LIST=""
|
|
|
|
|
2005-05-17 01:37:23 +02:00
|
|
|
# templates for the rules to manage forwarding rules (_IP_ will be substituted by the host's IP)
|
2005-05-17 02:26:11 +02:00
|
|
|
RULE_ADD='$IPT -t nat -I $CHAIN_FORWARD_CHECK -s _IP_ -j $CHAIN_FORWARD_ACTION'
|
|
|
|
RULE_DEL='$IPT -t nat -D $CHAIN_FORWARD_CHECK -s _IP_ -j $CHAIN_FORWARD_ACTION'
|
2005-05-17 01:37:23 +02:00
|
|
|
|
|
|
|
# the iptables chain, that contains all forwarded ips
|
2005-05-17 02:26:11 +02:00
|
|
|
CHAIN_FORWARD_CHECK=web_splash_forward_check
|
|
|
|
CHAIN_FORWARD_ACTION=web_splash_forward_action
|
|
|
|
CHAIN_REDIRECT=web_splash_redirect
|
2005-05-17 12:11:28 +02:00
|
|
|
CHAIN_SERVICES=web_splash_services
|
2005-05-17 01:37:23 +02:00
|
|
|
|
|
|
|
# the iptables action for bad packets (e.g. DROP or REJECT)
|
2005-05-17 02:26:11 +02:00
|
|
|
REJECT_ACTION=DROP
|
2005-05-17 01:37:23 +02:00
|
|
|
|
|
|
|
# the location of the iptables program
|
|
|
|
IPT=/sbin/iptables
|
|
|
|
[ ! -x "$IPT" ] && IPT=/usr/sbin/iptables
|
|
|
|
|
2005-05-17 12:11:28 +02:00
|
|
|
# path to the web-splash scripts
|
2005-05-18 05:31:27 +02:00
|
|
|
SPLASH_BIN=/usr/bin
|