/* 00comp_ipnet_firewall.cdf - IPNet Firewall configuration file */

/*
 * Copyright (c) 2006-2007 Wind River Systems, Inc.
 *
 * The right to copy, distribute or otherwise make use of this software
 * may be licensed only pursuant to the terms of an applicable Wind River
 * license agreement. No license to Wind River intellectual property rights
 * is granted herein. All rights not licensed by Wind River are reserved
 * by Wind River.
 */

/*
modification history
--------------------
01e,07sep07,rme  Changed SELECTION_IPCOM_FS to SELECT_IPCOM_FS in INCLUDE_IPFIREWALL
01d,27feb07,kch  Changed IPF_MAX_STATEFUL_MAPPINGS default value from 100 to
                 1000 (WIND00089286).
01c,07feb07,tkf  Add INCLUDE_IPFIREWALL dependnecy on
                 SELECTION_IPCOM_FS.
01b,23sep06,kch  Fixed IPCOM shell commands description.
01a,21sep06,kch  Created.
*/

#ifdef _WRS_CONFIG_COMPONENT_IPFIREWALL
Component INCLUDE_IPFIREWALL {
    NAME            Firewall
    SYNOPSIS        Firewall
    LINK_SYMS       ipfirewall_enable
    REQUIRES        INCLUDE_IPCOM SELECT_IPCOM_FS
    CONFIGLETTES    ipfirewall_config.c
    CFG_PARAMS      IPF_ICMP_TIMEOUT IPF_UDP_TIMEOUT IPF_TCP_TIMEOUT \
                    IPF_OTHER_TIMEOUT IPF_MAX_STATEFUL_MAPPINGS \
                    IPF_IPV4_RULE_FILE IPF_IPV6_RULE_FILE \
                    IPF_FWMAC_RULE_FILE
    _CHILDREN       FOLDER_FIREWALL
}

Component INCLUDE_IPFIREWALL_CMD {
    NAME        IPCOM Firewall commands
    SYNOPSIS    IPCOM Ipfirewall configuration commands.
    LINK_SYMS   ipfirewall_enable
    REQUIRES    INCLUDE_IPCOM_SHELL_CMD INCLUDE_IPFIREWALL
    _CHILDREN   FOLDER_FIREWALL
}

/******************** Configuration Parameters *****************************/

/* INCLUDE_IPFIREWALL configuration parameters */
Parameter IPF_ICMP_TIMEOUT {
    NAME        ICMP stateful mapping timeout
    SYNOPSIS    The timeout in seconds until an icmp stateful mapping expires.
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPF_UDP_TIMEOUT {
    NAME        UDP stateful mapping timeout
    SYNOPSIS    The timeout in seconds until an udp stateful mapping expires.
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPF_TCP_TIMEOUT {
    NAME        TCP stateful mapping timeout
    SYNOPSIS    The timeout in seconds until a tcp stateful mapping expires.
    TYPE        char *
    DEFAULT     "432000"
}

Parameter IPF_OTHER_TIMEOUT {
    NAME        Other stateful mapping timeout
    SYNOPSIS    The timeout in seconds until other stateful mappings expires.
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPF_MAX_STATEFUL_MAPPINGS {
    NAME        Maximum number of stateful mappings
    SYNOPSIS    Specifies the maximum number of stateful mappings the \
                firewall is able to handle.
    TYPE        char *
    DEFAULT     "1000"
}

Parameter IPF_IPV4_RULE_FILE {
    NAME        Default IPv4 rule file
    SYNOPSIS    Specifies the name of the default IPv4 rule file. The \
                firewall will load the rules from this file if it exists \
                at boot.
    TYPE        char *
    DEFAULT     IPCOM_FILE_ROOT"fw4.cfg"
}

Parameter IPF_IPV6_RULE_FILE {
    NAME        Default IPv6 rule file
    SYNOPSIS    Specifies the name of the default IPv6 rule file. The \
                firewall will load the rules from this file if it exists \
                at boot.
    TYPE        char *
    DEFAULT     IPCOM_FILE_ROOT"fw6.cfg"
}

Parameter IPF_FWMAC_RULE_FILE {
    NAME        Default MAC filter rule file
    SYNOPSIS    Specifies the name of the default MAC filter rule file. The \
                firewall will load the rules from this file if it exists \
                at boot.
    TYPE        char *
    DEFAULT     IPCOM_FILE_ROOT"fwmac.cfg"
}
#endif