fwservices.xml

linux环境下的一个防火墙程序的源代码

		<filter direction="go" p="tcp" dport="111"/>
		<filter direction="back" p="tcp" sport="111"/>
		<filter direction="go" p="udp" dport="111"/>
		<filter direction="back" p="udp" sport="111"/>
		<filter direction="go" p="tcp" dport="2049"/>
		<filter direction="back" p="tcp" sport="2049"/>
		<filter direction="go" p="udp" dport="2049"/>
		<filter direction="back" p="udp" sport="2049"/>
		<filter direction="go" p="tcp" state="ESTABLISHED,RELATED"/>
		<filter direction="back" p="tcp"/>
		<filter direction="go" p="udp" state="ESTABLISHED,RELATED"/>
		<filter direction="back" p="udp"/>
	</service>

	<service name="mysql" description="MySQL-Server">
		<filter direction="go" p="tcp" dport="mysql"/>
		<filter direction="back" p="tcp" sport="mysql"/>
		<filter direction="go" p="udp" dport="mysql"/>
		<filter direction="back" p="udp" sport="mysql"/>
	</service>

	<service name="kazaa" description="KaZaa Filesharing">
		<filter direction="go" p="tcp" dport="1214"/>
		<filter direction="back" p="tcp" sport="1214"/>
		<filter direction="go" p="udp" dport="1214"/>
		<filter direction="back" p="udp" sport="1214"/>
	</service>

	<service name="pptp" description="PPTP VPN Service">
		<filter direction="go" p="47"/>
		<filter direction="back" p="47" jump="ACCEPT"/>
		<filter direction="go" p="tcp" dport="1723"/>
		<filter direction="back" p="tcp" sport="1723" jump="ACCEPT"/>
	</service>

	<service name="rdp" description="Remote Desktop Protocol">
		<filter direction="go" p="tcp" dport="3389"/>
		<filter direction="back" p="tcp" sport="3389"/>
	</service>

	<service name="pc-anywhere" description="PC-Anywhere service (admin to hosts)">
	    <filter direction="go" p="tcp" dport="5631:5632"/>
	    <filter direction="back" p="tcp" sport="5631:5632"/>
	</service>

	<service name="x11" description="X Window System service (client to XServer)">
		<filter direction="go" p="tcp" dport="6000:6063"/>
		<filter direction="back" p="tcp" sport="6000:6063"/>
	</service>

	<service name="proxy8080" description="HTTP/HTTPS/FTP Proxy on port 8080">
		<filter direction="go" p="tcp" dport="8080"/>
		<filter direction="back" p="tcp" sport="8080"/>
	</service>

	<service name="proxy3128" description="HTTP/HTTPS/FTP Proxy on port 3128">
		<filter direction="go" p="tcp" dport="3128"/>
		<filter direction="back" p="tcp" sport="3128"/>
	</service>

	<service name="ssh21" description="SSH over port 21">
		<filter direction="go" p="tcp" dport="21"/>
		<filter direction="back" p="tcp" sport="21"/>
	</service>

	<service name="dhcp" description="DHCP/BOOTP protocol">
		<filter direction="go" p="udp" dport="67"/>
		<filter direction="back" p="udp" sport="67"/>
		<filter direction="go" p="tcp" dport="67"/>
		<filter direction="back" p="tcp" sport="67"/>
		<filter direction="go" p="udp" dport="68"/>
		<filter direction="back" p="udp" sport="68"/>
		<filter direction="go" p="tcp" dport="68"/>
		<filter direction="back" p="tcp" sport="68"/>
	</service>

	<service name="snmptrap" description="snmptrap">
		<filter direction="go" p="udp" dport="162"/>
		<filter direction="back" p="udp" sport="162"/>
	</service>

	<service name="socks" description="Socks Proxy">
		<filter direction="go" p="tcp" dport="1080"/>
		<filter direction="back" p="tcp" sport="1080"/>
	</service>

	<service name="edonkey" description="eDonkey (outging and incoming)">
		<filter direction="go" p="tcp" dport="4661"/>
		<filter direction="back" p="tcp" sport="4661"/>
		<filter direction="back" p="tcp" dport="4661" jump="ACCEPT"/>
		<filter direction="go" p="tcp" sport="4661" state="ESTABLISHED,RELATED" jump="ACCEPT"/>

		<filter direction="go" p="tcp" dport="4662"/>
		<filter direction="back" p="tcp" sport="4662"/>
		<filter direction="back" p="tcp" dport="4662" jump="ACCEPT"/>
		<filter direction="go" p="tcp" sport="4662" state="ESTABLISHED,RELATED" jump="ACCEPT"/>

		<filter direction="go" p="udp" dport="4665"/>
		<filter direction="back" p="udp" sport="4665"/>
		<filter direction="back" p="udp" dport="4665" jump="ACCEPT"/>
		<filter direction="go" p="udp" sport="4665"/>
	</service>

	<service name="soulseek" Description="Soulseek std">
		<filter direction="go" p="tcp" dport="2242"/>
		<filter direction="back" p="tcp" sport="2242" jump="ACCEPT"/>

		<filter direction="go" p="tcp" dport="2234"/>
		<filter direction="back" p="tcp" sport="2234" jump="ACCEPT"/>

		<filter direction="go" p="tcp" dport="5534"/>
		<filter direction="back" p="tcp" sport="5534" jump="ACCEPT"/>

		<filter direction="go" p="udp" dport="2238"/>
		<filter direction="back" p="udp" sport="2238" jump="ACCEPT"/>

		<filter direction="go" p="udp" dport="2246"/>
		<filter direction="back" p="udp" sport="2246" jump="ACCEPT"/>

		<filter direction="go" p="udp" dport="5538"/>
		<filter direction="back" p="udp" sport="5538" jump="ACCEPT"/>
	</service>

	<service name="aim-icq" Description="AIM / ICQ">
		<filter direction="go" p="tcp" dport="5190"/>
		<filter direction="back" p="tcp" sport="5190" jump="ACCEPT"/>
		<filter direction="go" p="udp" dport="5194"/>
		<filter direction="back" p="udp" sport="5194" jump="ACCEPT"/>
	</service>

	<service name="oracle" description="Oracle (1521)">
		<filter direction="go" p="tcp" dport="1521"/>
		<filter direction="back" p="tcp" sport="1521"/>
	</service>

	<service name="vnc" description="VNC">
		<filter direction="go" p="tcp" dport="5900"/>
		<filter direction="back" p="tcp" sport="5900"/>
	</service>

	<service name="vnc-http" description="VNC-http">
		<filter direction="go" p="tcp" dport="5800"/>
		<filter direction="back" p="tcp" sport="5800"/>
	</service>

	<service name="rip" description="Router Information Protocol">
		<filter direction="go" p="udp" dport="520"/>
		<filter direction="back" p="udp" sport="520"/>
	</service>

	<service name="syslog" description="syslog protocol">
		<filter direction="go" p="udp" dport="514"/>
		<filter direction="back" p="udp" sport="514"/>
	</service>

	<service name="icecast" description="ICEcast streaming protocol">
		<filter direction="go" p="tcp" dport="8000"/>
		<filter direction="back" p="tcp" sport="8000"/>
	</service>

	<service name="icp" description="Internet Cache Protocol">
		<filter direction="go" p="tcp" dport="3130"/>
		<filter direction="back" p="tcp" sport="3130"/>
		<filter direction="go" p="udp" dport="3130"/>
		<filter direction="back" p="udp" sport="3130"/>
	</service>

	<service name="irc" description="Internet Relay Chat">
		<filter direction="go" p="tcp" dport="6667"/>
		<filter direction="back" p="tcp" sport="6667"/>
		<filter direction="go" p="udp" dport="6667"/>
		<filter direction="back" p="udp" sport="6667"/>
	</service>

	<service name="jabber" description="Jabber IM protocol (client to server)">
		<filter direction="go" p="tcp" dport="5222"/>
		<filter direction="back" p="tcp" sport="5222"/>
		<filter direction="go" p="tcp" dport="5223"/>
		<filter direction="back" p="tcp" sport="5223"/>
	</service>

	<service name="jabber-s2s" description="Jabber IM protocol (server to server)">
		<filter direction="go" p="tcp" dport="5269"/>
		<filter direction="back" p="tcp" sport="5269"/>
	</service>
	
	<service name="lpr" description="Line Printer Protocol">
		<filter direction="go" p="tcp" dport="515"/>
		<filter direction="back" p="tcp" sport="515"/>
	</service>

	<service name="rdp" description="Windows Remote Desktop Protocol (RDP)">
		<filter direction="go" p="tcp" dport="3389"/>
		<filter direction="back" p="tcp" sport="3389"/>
	</service>

	<service name="openvpn" description="OpenVPN (tcp,udp)">
		<filter direction="go" p="tcp" dport="1194"/>
		<filter direction="back" p="tcp" sport="1194"/>
		<filter direction="go" p="udp" dport="1194"/>
		<filter direction="back" p="udp" sport="1194"/>
	</service>

	<service name="igmp" description="Internet Group Management Protocol">
		<filter direction="go" p="igmp"/>
		<filter direction="back" p="igmp"/>
	</service>
	
	<service name="bpalogin" description="BPALogin">
		<filter direction="go" p="udp" sport="5051"/>
		<filter direction="back" p="udp" sport="5051"/>
	</service>
	
</services>