#!/bin/bash
#
#For instructions on how to set the parameters in this file, refer to 
#mason.txt that came with this package; try looking in 
#/usr/doc/mason-{version}/mason.txt or refer to 
#http://www.pobox.com/~wstearns/mason/  You do not have to make any 
#changes here unless you want to change the defaults.  The defaults 
#are generally used below, but see the documentation for more details.
#Please see mason.txt or http://www.pobox.com/~wstearns/mason/ for 
#more information and copyright information.
#	- William Stearns (wstearns@pobox.com)
#
# Reminder; this file is for system wide defaults.  
# If you wish to set something for this 
# run only, simply set it on the command line just before calling mason.  For 
# example, putting DYNIF="ppp0" in this file has the 
# same effect on this execution of the program as running 
# DYNIF="ppp0" mason<Enter>.
#
#	The values in this script can be changed on the fly without
#having to stop and restart Mason; simply make your changes, save the
#file and run "killall -USR1 mason".  Mason will only reread this 
#file when it receives this signal.
#	To have Mason gracefully exit, run "killall -HUP mason".
#
#
#A quote enclosed, space separated list of interfaces that change 
#IP address from time to time.  Leave as "" if all addresses stay constant.
#For diald, use DYNIF="sl0 pppo"  .
#DYNIF="ppp0"
#
#
#What policy should mason use for upcoming rules?  If this is not set,
#the value of DEFAULTPOLICY (hardcoded in the script) is used.
#POLICY="accept"
#POLICY="reject"
#POLICY="deny"
#
#
#Location of runtime changeable files and configuration
MASONDIR="/var/lib/mason/"
#
#       
#NAMECACHE _could_ be /etc/hosts, but this was really intended to be a
#local cache for Mason only.  This really should be in some directory like
#/var/lib/mason.
NAMECACHE="${MASONDIR}morehosts"
NETCACHE="${MASONDIR}netconvert"
NOLOGSUFFIX="N" #If you change this, change it in ruleshell too.
#
#
#To be removed...
#If you change this, make sure an identical value is placed in
#mason_policy as well.
POLICYFILE="${MASONDIR}current_policy"
#
#
#This is the configuration file mason uses.  It can be changed while
#Mason is running as long as the SIGUSR1 signal is sent to Mason afterwards.
#It's probably not a good idea to change this on the fly...
CONFFILE="${MASONDIR}masonrc"
#
#
#What to use if there is no policyfile or its contents are not accept,
#reject, or deny.  Please, no typos...
DEFAULTPOLICY="accept"
#
#
# "YES" to debug, anything else = dont
DEBUG="NO"
#
#
# "ipchains" = echo ipchains command to STDOUT, "ipfwadm" = echo
# ipfwadm command to STDOUT, "none" = don't echo either.
#ECHOCOMMAND=""
#
#
# "ipchains" = actually run the ipchains command, "ipfwadm" = actually
# run the ipfwadm command, "none" = don't run either.  no is useful if you're
# not running Mason as root or are running Mason on some machine other
# than the actual operating firewall.  User can override either by simply
# setting the environment variable ahead of time.
#DOCOMMAND=""
#
#
# "yes" = echo dot to STDERR when processing a repeat line,
# "no" = don't.
#HEARTBEAT="yes"
#
#
# What should the IP address be converted to?
# network: the smallest network in the routing table that contains the address.
# hostname: the hostname for the machine
# none: leave IP address as is.
# custom: to be implemented.
# dynamic IP's are replaced with ${ifNADDR} solely based on the value of DYNIF
#IPCONV="hostname"
#IPCONV="network"
#IPCONV="none"
#IPCONV="custom"


#Beeps to be added later
#DOBEEP="YES"       # "YES" = beep at user with new rule, "NO" = dont

#Setting this to yes will cause Mason to exit on the next pass.
#Probably easier to type "killall -HUP mason"
#EXITMASON="NO"

PORT_MASQ_BEGIN=61000
PORT_MASQ_END=65096


#BKLOGFILE='~/bklog'
#BKVERBOSE=YES

#Copyleft:
#    Mason interactively creates a Linux packet filtering firewall.
#    Copyright (C) 1998, 1999 William Stearns <wstearns@pobox.com>
#
#    This program is free software; you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation; either version 2 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program; if not, write to the Free Software
#    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
#
#    The author can also be reached at:
#        William Stearns
#email:  wstearns@pobox.com              (preferred)
#web:    http://www.pobox.com/~wstearns
#snail:  544 Winchester Place
#        Colchester VT, 05446

