Michael Rash
48 lines
1.8 KiB
Plaintext
48 lines
1.8 KiB
Plaintext
### test comment
|
|
SOURCE 4.3.2.0/24, 127.0.0.0/24, 23.43.0.0/16, 10.10.10.10
|
|
KEY test1
|
|
HMAC_KEY test2
|
|
DIGEST_TYPE sha512
|
|
HMAC_DIGEST_TYPE sha256
|
|
OPEN_PORTS udp/6001, tcp/22, tcp/80
|
|
FW_ACCESS_TIMEOUT 2
|
|
|
|
SOURCE ANY
|
|
KEY test3
|
|
ACCESS_EXPIRE 03/10/2014; ### comment
|
|
OPEN_PORTS tcp/22;
|
|
RESTRICT_PORTS udp/6001, tcp/45, tcp/80, tcp/12345
|
|
FW_ACCESS_TIMEOUT 3
|
|
ENCRYPTION_MODE legacy
|
|
|
|
SOURCE ANY
|
|
REQUIRE_SOURCE_ADDRESS Y
|
|
REQUIRE_USERNAME nouser
|
|
KEY test4
|
|
OPEN_PORTS tcp/80
|
|
FORCE_NAT 192.168.1.123 22
|
|
FORCE_SNAT 33.3.3.3
|
|
|
|
SOURCE 1.2.3.4
|
|
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
|
|
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
|
|
OPEN_PORTS tcp/80; ### also appears in RESTRICT_PORTS
|
|
RESTRICT_PORTS udp/6001, tcp/22, tcp/80, tcp/12345
|
|
FW_ACCESS_TIMEOUT 3
|
|
ENABLE_CMD_EXEC Y
|
|
|
|
SOURCE ANY
|
|
KEY fwknoptest
|
|
FW_ACCESS_TIMEOUT 3
|
|
GPG_HOME_DIR ../conf/server-gpg
|
|
GPG_DECRYPT_ID 12341234, DEADBEEF, 361BBAD4, 43214321
|
|
GPG_DECRYPT_PW fwknoptest, testtest
|
|
GPG_REMOTE_ID 6A3FAD56
|
|
|
|
SOURCE ANY
|
|
FW_ACCESS_TIMEOUT 3
|
|
GPG_HOME_DIR ../conf/server-gpg-no-pw
|
|
GPG_DECRYPT_ID 361BBAD4
|
|
GPG_ALLOW_NO_PW Y
|
|
GPG_FINGERPRINT_ID 00CC95F05BC146B6AC4038C9E36F443C6A3FAD56
|