aboutsummaryrefslogtreecommitdiff
path: root/files
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2019-07-03 15:28:22 +0200
committerTim Meusel <tim@bastelfreak.de>2019-07-03 15:28:22 +0200
commitf278febe03630e5e316334196df8b5583a24c32d (patch)
tree4c39d21ded0521bc3cffdf8213f57f67d9f1625c /files
parent9f4ad5539dc98f579ba775941549d89419d9ca13 (diff)
downloadpuppet-ferm-f278febe03630e5e316334196df8b5583a24c32d.tar.gz
puppet-ferm-f278febe03630e5e316334196df8b5583a24c32d.tar.bz2
delete unneeded file
Diffstat (limited to 'files')
-rw-r--r--files/ferm.conf38
1 files changed, 0 insertions, 38 deletions
diff --git a/files/ferm.conf b/files/ferm.conf
deleted file mode 100644
index 27eea58..0000000
--- a/files/ferm.conf
+++ /dev/null
@@ -1,38 +0,0 @@
-# -*- shell-script -*-
-#
-# Ferm example script
-#
-# Firewall configuration for a workstation which accepts remote ssh login.
-#
-# Author: Max Kellermann <max@duempel.org>
-#
-
-table filter {
- chain INPUT {
- policy DROP;
-
- # connection tracking
- mod state state INVALID DROP;
- mod state state (ESTABLISHED RELATED) ACCEPT;
-
- # allow local connections
- interface lo ACCEPT;
-
- # respond to ping
- proto icmp icmp-type echo-request ACCEPT;
-
- # allow SSH connections
- proto tcp dport ssh ACCEPT;
-
- # ident connections are also allowed
- proto tcp dport auth ACCEPT;
-
- # the rest is dropped by the above policy
- }
-
- # outgoing connections are not limited
- chain OUTPUT policy ACCEPT;
-
- # this is not a router
- chain FORWARD policy DROP;
-}