#CONFIG_FILE                 ../conf/default_fwknopd.conf
#OVERRIDE_CONFIG             ../conf/default_fwknopd.conf
PCAP_INTF                   eth0
#PCAP_FILE                   <not set>
ENABLE_PCAP_PROMISC         Y
PCAP_FILTER                 udp port 62201
PCAP_DISPATCH_COUNT         100
PCAP_LOOP_SLEEP             100000
ENABLE_PCAP_ANY_DIRECTION   Y
MAX_SNIFF_BYTES             1500
ENABLE_SPA_PACKET_AGING     Y
MAX_SPA_PACKET_AGE          120
ENABLE_DIGEST_PERSISTENCE   Y
CMD_EXEC_TIMEOUT            1
ENABLE_SPA_OVER_HTTP        N
ENABLE_TCP_SERVER           N
TCPSERV_PORT                62201
ENABLE_UDP_SERVER           N
UDPSERV_PORT                62201
UDPSERV_SELECT_TIMEOUT      500000
LOCALE                      C
SYSLOG_IDENTITY             fwknopd
SYSLOG_FACILITY             LOG_DAEMON
ENABLE_FIREWD_FORWARDING       N
ENABLE_FIREWD_LOCAL_NAT        Y
ENABLE_FIREWD_SNAT             N
SNAT_TRANSLATE_IP           1.2.3.4
ENABLE_FIREWD_OUTPUT           N
FLUSH_FIREWD_AT_INIT           Y
FLUSH_FIREWD_AT_EXIT           Y
FIREWD_INPUT_ACCESS            ACCEPT, filter, INPUT, 1, FWKNOP_INPUT, 1
FIREWD_OUTPUT_ACCESS           ACCEPT, filter, OUTPUT, 1, FWKNOP_OUTPUT, 1
FIREWD_FORWARD_ACCESS          ACCEPT, filter, FORWARD, 1, FWKNOP_FORWARD, 1
FIREWD_DNAT_ACCESS             DNAT, nat, PREROUTING, 1, FWKNOP_PREROUTING, 1
FIREWD_SNAT_ACCESS             SNAT, nat, POSTROUTING, 1, FWKNOP_POSTROUTING, 1
FIREWD_MASQUERADE_ACCESS       MASQUERADE, nat, POSTROUTING, 1, FWKNOP_POSTROUTING, 1
ENABLE_FIREWD_COMMENT_CHECK    Y
FWKNOP_RUN_DIR              /var/run/fwknop
FWKNOP_CONF_DIR             /etc/fwknop
#ACCESS_FILE                 ../conf/default_access.conf
FWKNOP_PID_FILE             /var/run/fwknop/fwknopd.pid
DIGEST_FILE                 /var/run/fwknop/digest.cache
GPG_HOME_DIR                /root/.gnupg
GPG_EXE                     /usr/bin/gpg
FIREWALL_EXE                /sbin/iptables
VERBOSE                     Y
#FAULT_INJECTION_TAG         <not set>
