113 lines
3.7 KiB
Mathematica
113 lines
3.7 KiB
Mathematica
/* 00comp_ipnet_firewall.cdf - IPNet Firewall configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006-2007 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
01e,07sep07,rme Changed SELECTION_IPCOM_FS to SELECT_IPCOM_FS in INCLUDE_IPFIREWALL
|
|
01d,27feb07,kch Changed IPF_MAX_STATEFUL_MAPPINGS default value from 100 to
|
|
1000 (WIND00089286).
|
|
01c,07feb07,tkf Add INCLUDE_IPFIREWALL dependnecy on
|
|
SELECTION_IPCOM_FS.
|
|
01b,23sep06,kch Fixed IPCOM shell commands description.
|
|
01a,21sep06,kch Created.
|
|
*/
|
|
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPFIREWALL
|
|
Component INCLUDE_IPFIREWALL {
|
|
NAME Firewall
|
|
SYNOPSIS Firewall
|
|
LINK_SYMS ipfirewall_enable
|
|
REQUIRES INCLUDE_IPCOM SELECT_IPCOM_FS
|
|
CONFIGLETTES ipfirewall_config.c
|
|
CFG_PARAMS IPF_ICMP_TIMEOUT IPF_UDP_TIMEOUT IPF_TCP_TIMEOUT \
|
|
IPF_OTHER_TIMEOUT IPF_MAX_STATEFUL_MAPPINGS \
|
|
IPF_IPV4_RULE_FILE IPF_IPV6_RULE_FILE \
|
|
IPF_FWMAC_RULE_FILE
|
|
_CHILDREN FOLDER_FIREWALL
|
|
}
|
|
|
|
Component INCLUDE_IPFIREWALL_CMD {
|
|
NAME IPCOM Firewall commands
|
|
SYNOPSIS IPCOM Ipfirewall configuration commands.
|
|
LINK_SYMS ipfirewall_enable
|
|
REQUIRES INCLUDE_IPCOM_SHELL_CMD INCLUDE_IPFIREWALL
|
|
_CHILDREN FOLDER_FIREWALL
|
|
}
|
|
|
|
/******************** Configuration Parameters *****************************/
|
|
|
|
/* INCLUDE_IPFIREWALL configuration parameters */
|
|
Parameter IPF_ICMP_TIMEOUT {
|
|
NAME ICMP stateful mapping timeout
|
|
SYNOPSIS The timeout in seconds until an icmp stateful mapping expires.
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter IPF_UDP_TIMEOUT {
|
|
NAME UDP stateful mapping timeout
|
|
SYNOPSIS The timeout in seconds until an udp stateful mapping expires.
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter IPF_TCP_TIMEOUT {
|
|
NAME TCP stateful mapping timeout
|
|
SYNOPSIS The timeout in seconds until a tcp stateful mapping expires.
|
|
TYPE char *
|
|
DEFAULT "432000"
|
|
}
|
|
|
|
Parameter IPF_OTHER_TIMEOUT {
|
|
NAME Other stateful mapping timeout
|
|
SYNOPSIS The timeout in seconds until other stateful mappings expires.
|
|
TYPE char *
|
|
DEFAULT "60"
|
|
}
|
|
|
|
Parameter IPF_MAX_STATEFUL_MAPPINGS {
|
|
NAME Maximum number of stateful mappings
|
|
SYNOPSIS Specifies the maximum number of stateful mappings the \
|
|
firewall is able to handle.
|
|
TYPE char *
|
|
DEFAULT "1000"
|
|
}
|
|
|
|
Parameter IPF_IPV4_RULE_FILE {
|
|
NAME Default IPv4 rule file
|
|
SYNOPSIS Specifies the name of the default IPv4 rule file. The \
|
|
firewall will load the rules from this file if it exists \
|
|
at boot.
|
|
TYPE char *
|
|
DEFAULT IPCOM_FILE_ROOT"fw4.cfg"
|
|
}
|
|
|
|
Parameter IPF_IPV6_RULE_FILE {
|
|
NAME Default IPv6 rule file
|
|
SYNOPSIS Specifies the name of the default IPv6 rule file. The \
|
|
firewall will load the rules from this file if it exists \
|
|
at boot.
|
|
TYPE char *
|
|
DEFAULT IPCOM_FILE_ROOT"fw6.cfg"
|
|
}
|
|
|
|
Parameter IPF_FWMAC_RULE_FILE {
|
|
NAME Default MAC filter rule file
|
|
SYNOPSIS Specifies the name of the default MAC filter rule file. The \
|
|
firewall will load the rules from this file if it exists \
|
|
at boot.
|
|
TYPE char *
|
|
DEFAULT IPCOM_FILE_ROOT"fwmac.cfg"
|
|
}
|
|
#endif
|