# set to 1 to allow firewall-supplement to work on startup
ON_BOOT=0

# set to 1 to create the NAT automatically (if not managed by
# another script like lxc-net for instance)
CREATE_NAT=0

#### Internet:
INTERNET_INTERFACE=eth0

# ports opened to the internet interface
#   syntax: port (open), port->IP (open and forward), port->IP:port (open and forward redirected to another
# port), IP->port (open to IP), IP->port->IP:port (open to IP and forward)
# ex:
#  - port number like 22 for ssh
#  - port number and forward IP:port like 2222->172.16.0.22:22 for
#      ssh to local ip 172.16.0.22 through port 2222
INTERNET_PORTS=22, 2222->172.16.0.22:22

# one or several IP addresses (IP,IP,...) that get unfiltered access
# thru internet
# (not recommended to set this permanently) 
#INTERNET_PRIVILEDGED_IP=


#### Intranet:
INTRANET_INTERFACE=eth1

# ports opened to the intranet interface
#   syntax: port (open), port->IP:port (open and forward)
# ex:
#  - port number like * wildcard to accept all
#  - port number and forward IP like 22->172.16.0.22 for
#      ssh to local ip 172.16.0.22
INTRANET_PORTS=*

# (if you have two distinct intranet, you can also use
# INTRANET_INTERFACE2, INTRANET_PORTS2 and CREATE_NAT2 variables)

# EOF
