#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
# clients	: PROTO ; PORT ; IFACE ; IFACE ; IFACE .... |
# servers	: PROTO ; PORT ; IFACE ; IFACE ; IFACE .... |

# Only intranet
local network="$network;$net"

# [ TELEPHONY ]
local clients="$clients|UDP	;sip:aol	"
local servers="$servers|UDP	;sip:aol	"
local clients="$clients|UDP	;10000:20000	"
local servers="$servers|UDP	;10000:20000	"
local clients="$clients|TCP	;sip:aol	"
local servers="$servers|TCP	;sip:aol	"
local clients="$clients|TCP	;10000:20000	"
local servers="$servers|TCP	;10000:20000	"

# [ LDAP ]
local clients="$clients|UDP	;ldap	"
local servers="$servers|UDP	;ldap	"
local clients="$clients|TCP	;ldap	"
local servers="$servers|TCP	;ldap	"
# [ MICROSOFT RDP ]
local clients="$clients|TCP	;3389	"
local servers="$servers|TCP	;3389	"

# SAMBA
local clients="$clients|UDP	;netbios-dgm	"
local servers="$servers|UDP	;netbios-dgm	"
local clients="$clients|TCP	;microsoft-ds	"
local servers="$servers|TCP	;microsoft-ds	"
local clients="$clients|TCP	;netbios-ssn	"
local servers="$servers|TCP	;netbios-ssn	"
local clients="$clients|TCP	;loc-srv	"
local servers="$servers|TCP	;loc-srv	"
# SAMBA - kerberos
local clients="$clients|UDP	;kerberos	"
local servers="$servers|UDP	;kerberos	"
local clients="$clients|TCP	;kerberos	"
local servers="$servers|TCP	;kerberos	"
# SAMBA - ...
local clients="$clients|TCP	;3268	"
local servers="$servers|TCP	;3268	"
local clients="$clients|TCP	;1024	"
local servers="$servers|TCP	;1024	"

# ruleOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# ruleIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""