define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9


table ip ipfilter {
	chain routing {
		type filter hook forward priority filter; policy accept;
		icmp type echo-request iif { "$netif", "$dmzif" } drop
		icmp type { echo-reply, echo-request } accept
		drop
	}

	chain system_in {
		type filter hook input priority filter; policy accept;
		icmp type echo-request iif { "$netif", "$dmzif" } drop
	}
}