Changeset 10238 in genesis

Timestamp:

Mar 18, 2012, 9:01:29 PM (13 years ago)

Author:

richardvm

Message:

firewall needs be on at all time

File:

• tools/gformat.py (modified) (2 diffs)

tools/gformat.py

@@ -304 +304 @@
 # PROXY Configuration
 #
-{% if internalroute -%}
-static_routes="wleiden"
-route_wleiden="-net 172.16.0.0/12 {{ internalroute }}"
-{% endif -%}
 
 {% if gateway -%}
@@ -318 +314 @@
 
 # PROXY iLeiden Configuration
+ileiden_enable="{{ autogen_ileiden_enable }}"
+gateway_enable="{{ autogen_ileiden_enable }}"
+pf_enable="yes"
+pf2_enable="yes"
+{% if autogen_ileiden_enable == "yes" -%}
+pf_flags="-D ext_if={{ externalif }} -D int_if={{ internalif }} -D publicnat={80,443}"
 lvrouted_enable="{{ autogen_ileiden_enable }}"
 lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
-ileiden_enable="{{ autogen_ileiden_enable }}"
-gateway_enable="{{ autogen_ileiden_enable }}"
-pf_enable="{{ autogen_ileiden_enable }}"
-pf_flags="-D ext_if={{ externalif }} -D int_if={{ internalif }} -D publicnat={80,443}"
-pf2_enable="{{ autogen_ileiden_enable }}"
+{% else -%}
+pf_flags="-D ext_if={{ externalif }} -D int_if={{ internalif }} -D publicnat={0}"
+{% if internalroute -%}
+static_routes="wleiden"
+route_wleiden="-net 172.16.0.0/12 {{ internalroute }}"
+{% endif -%}
+{% endif -%}
+
 {% endif -%}