#static script for DSL/ISDN routers

#flush all existing filters 
remote ipfilter flush input internet 
remote ipfilter flush output internet 
remote ipfilter flush forward internet
eth ip filter flush input
eth ip filter flush output
eth ip filter flush forward

#drop all packets 
remote ipfilter append input drop internet 
remote ipfilter append output drop internet 

#ICMP from LAN to WAN will be accepted 
remote ipfilter insert output accept -p icmp internet 
remote ipfilter insert input accept -p icmp -sp 0 internet 
remote ipfilter insert input accept -p icmp -sp 3 internet 
remote ipfilter insert input accept -p icmp -sp 8 internet 
remote ipfilter insert input accept -p icmp -sp 11 internet 

#telnet from LAN to WAN will be accepted 
remote ipfilter insert output accept -p tcp -dp 23 internet 
remote ipfilter insert input accept -p tcp -sp 23 internet 

# L2TP Tunneling accepted
remote ipfilter insert output accept -p udp -dp 1701 internet
remote ipfilter insert input accept -p udp -sp 1701 internet

#HTTP from LAN to WAN will be accepted 
remote ipfilter insert output accept -p tcp -dp 80 internet 
remote ipfilter insert input accept -p tcp -sp 80 internet 

#FTP from LAN to WAN will be accepted 
remote ipfilter insert input accept -p tcp -sp 21 -dp 1024:65535 internet 
remote ipfilter insert output accept -p tcp -dp 21 -sp 1024:65535 internet 
remote ipfilter insert input accept -p tcp -sp 20 -dp 1024:65535 internet 
remote ipfilter insert output accept -p tcp -dp 20 -sp 1024:65535 internet 

#DNS from LAN to WAN will be accepted 
remote ipfilter insert output accept -p udp -dp 53 internet 
remote ipfilter insert input accept -p udp -sp 53 internet 

#E-mail - SMTP and POP3 requests from LAN to WAN accepted 
remote ipfilter insert output accept -p tcp -dp 25 internet 
remote ipfilter insert output accept -p tcp -dp 110 internet 
remote ipfilter insert input accept -p tcp -sp 25 internet 
remote ipfilter insert input accept -p tcp -sp 110 internet