firehol config

#
# FireHOL configuration
# Date: Sat Jan 14 17:02:47 CET 2017
#

interface docker0 docker
	policy accept


interface ens3 internet

	policy drop
	protection strong

	client dhcp accept
	server ICMP accept
	server "http https" accept
	server ftp accept

	server lenny3000 accept # lennys 3000

	server myssh accept # SSH on port 2222
	server mosh accept # MOSH on ports 60001-60999
	server minecraft accept # Minecraft on 25565
	server factorio accept # Factorio on 34197
	#server custom gg tcp/3001 default accept
	server custom mailconf tcp/8080 default accept
	server custom mailconfssl tcp/8443 default accept
	server "smtp smtps submission imap imaps pop3 pop3s" accept
	server custom sieve tcp/4190 default accept

	client ssh accept
	client ICMP accept
	client whois accept
	client dns accept
	client "http https" accept

	#i need time to find the needed ports. currently unrestricted
	client all accept

router DOCKERtoINTERNET inface docker0 outface ens3
	route all accept

router INTERNETtoDOCKER inface ens3 outface docker0
	protection strong
	masquerade
	route all accept

iptables -t nat -N DOCKER
iptables -t filter -N DOCKER
iptables -N DOCKER-ISOLATION