Advanced Policy Firewall (APF ayar dosyası)

DEVEL_MODE="0"
INSTALL_PATH="/etc/apf"
IFACE_UNTRUSTED="eth0"
IFACE_TRUSTED=""
USE_IPV6="1"
SET_VERBOSE="1"
SET_FASTLOAD="1"
SET_VNET="0"
SET_ADDIFACE="0"
SET_MONOKERN="0"
DOCKER_COMPAT="auto"
SET_EXPIRE="600"
PERMBLOCK_COUNT="5"
PERMBLOCK_INTERVAL="86400"
SET_REFRESH="10"
SET_REFRESH_MD5="1"
FQDN_TIMEOUT="10"
SET_TRIM="500"
VF_ROUTE="1"
VF_LGATE=""
RAB="1"
RAB_SANITY="1"
RAB_PSCAN_LEVEL="2"
RAB_HITCOUNT="1"
RAB_TIMER="600"
RAB_TRIP="1"
RAB_LOG_HIT="1"
RAB_LOG_TRIP="0"
TCP_STOP="DROP"
UDP_STOP="DROP"
ALL_STOP="DROP"
PKT_SANITY="1"
PKT_SANITY_INV="0"
PKT_SANITY_FUDP="1"
PKT_SANITY_PZERO="1"
TOS_DEF="0"
TOS_DEF_RANGE="512:65535"
TOS_0=""
TOS_2=""
TOS_4=""
TOS_8="21,20,80,443"
TOS_16="22,25,110,143"
TCR_PASS="1"
TCR_PORTS="33434:33534"
ICMP_LIM="30/s"
IG_TCP_CLIMIT="80:60,443:120,8443:15"
IG_UDP_CLIMIT=""
SYNFLOOD="1"
SYNFLOOD_RATE="100/s"
SYNFLOOD_BURST="150"
RESV_DNS="1"
RESV_DNS_DROP="1"
BLK_P2P_PORTS="1214,2323,4660_4678,6257,6699,6346,6347,6881_6889,7778"
BLK_PORTS="135_139,111,513,520,445,1433,1434,1234,1524,3127"
BLK_MCATNET="1"
BLK_PRVNET="0"
BLK_RESNET="1"
BLK_TCP_SACK_PANIC="0"
BLK_IDENT="1"
SYSCTL_CONNTRACK="262144"
SYSCTL_CONNTRACK_ADAPTIVE="1"
SYSCTL_CONNTRACK_INCREMENT="65536"
SYSCTL_CONNTRACK_HIGH="1048576"
SYSCTL_CONNTRACK_BUCKETS="32768"
SYSCTL_TCP="1"
SYSCTL_TCP_NOSACK="0"
SYSCTL_SYN="1"
SYSCTL_ROUTE="1"
SYSCTL_LOGMARTIANS="1"
SYSCTL_ECN="0"
SYSCTL_SYNCOOKIES="1"
SYSCTL_OVERFLOW="0"
HELPER_SSH="1"
HELPER_SSH_PORT="22"
HELPER_FTP="0"
HELPER_FTP_PORT="21"
HELPER_FTP_DATA="20"
IG_TCP_CPORTS="22,80,443,8443"
IG_UDP_CPORTS=""
IG_ICMP_TYPES="3,5,11,0,30,8"
IG_ICMPV6_TYPES="1,2,3,4,128,129"
EGF="0"
EG_TCP_CPORTS="21,25,80,443,43"
EG_UDP_CPORTS="20,21,53"
EG_ICMP_TYPES="all"
EG_ICMPV6_TYPES="all"
EG_TCP_UID=""
EG_UDP_UID=""
EG_DROP_CMD="eggdrop,psybnc,bitchx,BitchX,init,udp.pl"
SMTP_BLOCK="0"
SMTP_PORTS="25,465,587"
SMTP_ALLOWUSER=""
SMTP_ALLOWGROUP=""
DLIST_PHP="1"
DLIST_PHP_URL="https://cdn.rfxn.com/downloads/php_list"
DLIST_SPAMHAUS="1"
DLIST_SPAMHAUS_URL="https://www.spamhaus.org/drop/drop.lasso"
DLIST_DSHIELD="1"
DLIST_DSHIELD_URL="https://feeds.dshield.org/top10-2.txt"
DLIST_RESERVED="1"
DLIST_RESERVED_URL="https://cdn.rfxn.com/downloads/reserved.networks"
DLIST_ECNSHAME="0"
DLIST_ECNSHAME_URL="https://cdn.rfxn.com/downloads/ecnshame.lst"
USE_RGT="0"
GA_URL="https://yourhost.com/glob_allow.rules"
GD_URL="https://yourhost.com/glob_deny.rules"
USE_IPSET="auto"
IPSET_LOG_RATE="30"
IPSET_REFRESH="21600"
CC_LOG="1"
CC_LOG_ONLY="0"
CC_SRC="auto"
CC_CACHE_TTL="24"
CC_INTERVAL="7"
CC_IPV6="1"
CT_LIMIT="0"
CT_INTERVAL="30"
CT_BLOCK_TIME="1800"
CT_PORTS=""
CT_STATES=""
CT_SKIP_TIME_WAIT="0"
CT_PERMANENT="0"
CT_SKIP=""
USE_GRE="0"
GRE_PERSIST="1"
GRE_KEEPALIVE="10 3"
GRE_MTU=""
GRE_TTL="255"
LOG_DROP="1"
LOG_LEVEL="crit"
LOG_TARGET="LOG"
LOG_IA="1"
LOG_LGATE="0"
LOG_EXT="0"
LOG_RATE="30"
LOG_APF="/var/log/apf_log"
IPT_LOCK_SUPPORT="auto"
IPT_LOCK_TIMEOUT="3"
CNFINT="$INSTALL_PATH/internals/internals.conf"
. "$CNFINT"