firewall
rule 10 deny sharep2p from private to public
rule 20 deny winny from private to public
rule 30 permit any from private to private
rule 40 permit any from private to public
rule 50 permit dns from public.wan.ppp0 to public
rule 60 permit https from public.wan.ppp0 to public
rule 70 permit ssl from public.wan.ppp0 to public
rule 80 permit TCP from public.wan.ppp0 to public
rule 90 permit undecided from public.wan.ppp0 to public
protect
firewall
rule 10 deny facebook from private to public
rule 20 deny youtube from private to public
rule 30 permit any from private to private
rule 40 permit any from private to public
rule 50 permit any from public.wan.ppp0 to public
protect
!
no spanning-tree rstp enable
!
interface eth1
encapsulation ppp 0
!
interface ppp0
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@isp
ppp password isppasswd
ip tcp adjust-mss pmtu
!
interface vlan1
ip address 192.168.10.1/24
!
dpi
provider procera
enable
!
zone private
network lan
ip subnet 192.168.10.0/24
!
zone public
network wan
ip subnet 0.0.0.0/0 interface ppp0
host ppp0
ip address dynamic interface ppp0
!
firewall
rule 10 deny sharep2p from private to public
rule 20 deny winny from private to public
rule 30 permit any from private to private
rule 40 permit any from private to public
rule 50 permit dns from public.wan.ppp0 to public
rule 60 permit https from public.wan.ppp0 to public
rule 70 permit ssl from public.wan.ppp0 to public
rule 80 permit TCP from public.wan.ppp0 to public
rule 90 permit undecided from public.wan.ppp0 to public
protect
!
nat
rule 10 masq any from private to public
enable
!
ip route 0.0.0.0/0 ppp0
!
end