|=====================================================================|
| Firewall file for !Internet                                         |
|                                                                     |
| RISC OS Select; 1.03 (30 Mar 2002)                                  |
|                                                                     |
| Place any extra *InetFW commands, into this file.                   |
|                                                                     |
| The initial command must be that to enable the firewall :           |
|                                                                     |
| IF "<Inet$Error>" = "" THEN InetFW -e Enable on                     |
|                                                                     |
| (The IF...THEN statement above is necessary, as is the '-e'         |
| parameter.)                                                         |
|                                                                     |
| Subsequent commands should also check the error message. For        |
| example, to block all external (non-192.168.0.0/16) traffic for     |
| ShareFS and Freeway, one would do something akin to the commented   |
| section. Do note that the default policy for the following commands |
| is to accept all other packets.                                     |
|                                                                     |
| For more information on the InetFW command, consult the             |
| documentation supplied, or use the command :                        |
|    *InetFW help add                                                 |
|                                                                     |
|=====================================================================|

| Enable Firewalling (always defaults policy to 'deny')
| IF "<Inet$Error>" = "" THEN InetFW -e Enable on

| Accept local (192.168.x.x) traffic on the freeway or sharefs ports
| IF "<Inet$Error>" = "" THEN InetFW -e Add -n 6000 -p accept -P UDP -I -O -S 192.168.0.0/16 -D 192.168.0.0/16 49171,32771,32770

| Deny any packets on freeway or sharefs ports
| IF "<Inet$Error>" = "" THEN InetFW -e Add -n 6001 -p deny -P UDP -I -O -D * 49171,32771,32770

| Default policy is 'accept'
| IF "<Inet$Error>" = "" THEN InetFW -e Add -n 65534 -p accept
