Ajout du tp06

2025-04-09 17:35:51 +02:00
parent 49e9a22250
commit a116ae4538
3 changed files with 41 additions and 0 deletions
--- a/sisr1/tp06-firewall/current_ruleset.nft
+++ b/sisr1/tp06-firewall/current_ruleset.nft
@@ -0,0 +1,17 @@
+define netif = enp0s3
+define lanif = enp0s8
+define dmzif = enp0s9
+ 
+table ip ipfilter {
+        chain routing {
+                type filter hook forward priority filter; policy accept;
+                icmp type echo-request iif { $netif, $dmzif } drop
+                icmp type { echo-reply, echo-request } accept
+                drop
+        }
+ 
+        chain system_in {
+                type filter hook input priority filter; policy accept;
+                icmp type echo-request iif { $netif, $dmzif } drop
+        }
+}