From 083b112d03a4b95f8bf5c86fef8f0fff794a3be0 Mon Sep 17 00:00:00 2001 From: root Date: Tue, 4 Apr 2023 08:41:20 +0200 Subject: [PATCH] push ferm.conf --- roles/fw-ferm/files/ferm.conf.r-vp1 | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/roles/fw-ferm/files/ferm.conf.r-vp1 b/roles/fw-ferm/files/ferm.conf.r-vp1 index 4c380d7..b9c27bb 100644 --- a/roles/fw-ferm/files/ferm.conf.r-vp1 +++ b/roles/fw-ferm/files/ferm.conf.r-vp1 @@ -35,23 +35,22 @@ table filter { proto (udp tcp) dport domain ACCEPT; proto udp dport bootps ACCEPT; } - # interface réseau - interface $DEV_WORLD { - - } # the rest is dropped by the above policy }#FIN INPUT # outgoing connections are not limited - chain OUTPUT {policy ACCEPT; + chain OUTPUT { + policy ACCEPT; +# interface $DEV_VPN proto ssh dport 22 ACCEPT; + }#FIN OUTPUT chain FORWARD { policy ACCEPT; + proto icmp icmp-type echo-request ACCEPT; - } # connection tracking mod state state INVALID DROP; mod state state (ESTABLISHED RELATED) ACCEPT;