
#-----------------------------------------------------------------------
# README
#-----------------------------------------------------------------------
#
# The ICQ rules opens all of our high ports to any UDP packets coming
# from port 4000.
#
#-----------------------------------------------------------------------
# CHANGES
#-----------------------------------------------------------------------
#
# 2001-02-07  Jean-Sebastien Morisset <jsmoriss@mvlan.net>
#             Added check for CLUSTER_NAME and assoc. rules.
# 2000-10-26  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Added the "#m# 23" module config.
# 2000-10-17  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Added OUTCHAIN to allow outgoing UDP packets.
# 2000-10-14  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Initial module written for v5.0.
#
#-----------------------------------------------------------------------
# MODULE CONFIGURATION
#-----------------------------------------------------------------------
#
#m# 23
#a# accept
#i# cluster novirtual
#n# icq
#t# servers
#
#   |--------------------------------------------------------------------|
#d# The example network should cover all mirabilis ICQ servers. If you 
#d# want to masquerade ICQ connections from your private (LAN) work-
#d# stations, you'll need to add the icq module to the ip-masq-modules 
#d# option.
#d#
#d# Example:
#d#   accept-eth1-icq-servers = 205.188.0.0/16
#   |--------------------------------------------------------------------|
#
#-----------------------------------------------------------------------
# START OF MODULE CODE
#-----------------------------------------------------------------------

for host in `Option_Value accept $INTOPT icq servers`
do
	Hostports accept remote udp "ICQ" $host 4000
done
unset host

