;-----------------------------------------------------------------------------
; CONFIGURATION FILE
;-----------------------------------------------------------------------------
; Purpose..:  Contains user crafted rules for the InJoy Firewall.
; Remarks..:  Firewall rules are evaluated top-down.
; Syntax...:  Records begin in first position of a line.
;             Strings and IP addresses must be in quotes.
;             Blank line(s) terminate a record.
;             Lines starting with the '#' or ';' denote a comment.
;             Default values provided by matching file in the TEMPLATE dir.
;             Records must have unique names.
; Help.....:  Product documentation and matching template/.dct file.
; Errors...:  Written to logs/firewall.log
;_____________________________________________________________________________



Internal-Server	Rule-Status = Disabled
		Comment = "Access to server behind the firewall (DMZ)",
		Destination = "public-ip-address.com",
		Rule-Action = Allow,
		Direction = Bidirectional

Allow-Web	Rule-Status = Disabled
		Comment = "Open port on protected Firewall PC",
		Protocol = TCP,
		Destination-Port = "http",
		Destination = "My_IP",
		Rule-Action = Allow,
		Direction = Bidirectional

Redirect-Web-In	Rule-Status = Disabled
		Comment = "Redirect web to internal server (in)",
		Protocol = TCP,
		Destination-Port = "8080",
		Destination = "My_IP",
		Rule-Action = Portmap,
		Mapping-Dest-IP = "10.1.1.1",
		Mapping-Dest-Port = 80,

Redirect-Web-Out	Rule-Status = Disabled
		Comment = "Redirect web to internal server (out)",
		Protocol = TCP,
		Source-Port = "http",
		Rule-Action = Portmap,
		Mapping-Dest-Port = 8080,

Port-Range-Simple	Rule-Status = Disabled
		Comment = "Deny ftp, smtp and pop3",
		Destination-Port = "21 25 110",
		Direction = Incoming

Port-Range-Advanced	Rule-Status = Disabled
		Comment = "Deny 2 port ranges and ports below 1024",
		Destination-Port = "<1024 2000:3000 3000:3010",
		Direction = Incoming

Port-Range-Exclude	Rule-Status = Disabled
		Comment = "Deny all ports, except 80 and range 200-300",
		Destination-Port = "0:65535 -80 -200:300",
		Direction = Incoming

Account-LAN-Out	Rule-Status = Disabled
		Comment = "Accounting for internal net 10.x.x.x",
		Source = "10.0.0.0",
		Source-Netmask = 255.0.0.0,
		Rule-Action = Account,
		Account-File = "firewall/logs/ip-usage",
		Account-Type = Source-IP

Account-LAN-In	Rule-Status = Disabled
		Comment = "Accounting for internal net 10.x.x.x",
		Destination = "10.0.0.0",
		Destination-Netmask = 255.0.0.0,
		Rule-Action = Account,
		Account-File = "firewall/logs/ip-usage",
		Account-Type = Destination-IP

Log-Packets	Rule-Status = Disabled
		Comment = "Log all packets to a specific host",
		Destination = "fx.dk",
		Rule-Action = Log,
		Log-Control = Enabled,
		Log-File = "firewall/logs/fx.log",
		Direction = Outgoing

Pass-GUI	Rule-Status = Disabled,
		Comment = "Pass Remote GUI traffic (port 3333 by default)",
		Source-Port = "3333",
		Direction = Bidirectional,
		Rule-Action = Allow