Major network restructuring.

[firewall] / jem.m4

diff --git a/jem.m4 b/jem.m4
index f9922c9d58cb7a57ccd1f0f673ab9ad86bb6d7cf..c877300324bbd9493c0646438fc6cef82929f1ca 100644 (file)
--- a/jem.m4
+++ b/jem.m4
@@ -27,17 +27,23 @@
 ## This host isn't a router.
 setconf(forward, 0)
 
 ## This host isn't a router.
 setconf(forward, 0)
 

+## This host is involved in a routing asymmetry.
+setconf(rp_filter, 0)
+setconf(log_martians, 0)
+

 ###--------------------------------------------------------------------------
 ### Network interfaces.
 
 m4_divert(44)m4_dnl
 ## Interface definitions.
 ###--------------------------------------------------------------------------
 ### Network interfaces.
 
 m4_divert(44)m4_dnl
 ## Interface definitions.

-if_untrusted=eth0
-if_trusted=eth0
-if_vpn=eth0
-if_iodine=eth0
-if_its_mz=eth0
-if_its_pi=eth0
+if_dmz=eth0
+if_trusted=eth1
+if_safe=$if_dmz,$if_trusted
+if_untrusted=$if_dmz,$if_trusted
+if_vpn=$if_dmz,$if_trusted
+if_iodine=$if_dmz,$if_trusted
+if_its_mz=$if_dmz,$if_trusted
+if_its_pi=$if_dmz,$if_trusted

 
 m4_divert(-1)
 ###--------------------------------------------------------------------------
 
 m4_divert(-1)
 ###--------------------------------------------------------------------------