From e78483c48a9e96b978251905533cd25ebb59c773 Mon Sep 17 00:00:00 2001 From: "guillaume.emorine" Date: Thu, 4 Apr 2024 10:36:46 +0200 Subject: [PATCH 1/2] Actualiser sisr1/tp07/files_firewall/current_ruleset_partie_3.nft --- sisr1/tp07/files_firewall/current_ruleset_partie_3.nft | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft index a83f2d2..c75fcd5 100644 --- a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft +++ b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft @@ -10,7 +10,7 @@ table ip ipfilter{ type filter hook prerouting priority filter; policy drop; icmp type echo-reply accept icmp type echo-request iif {$lanif} oif {$dmzif} accept - icmp type echo-request iif {$lanif} ip daddr {$iplan} + icmp type echo-request iif {$lanif} ip daddr {$iplan} accept tcp dport 22 accept } chain system_in { From eb2c9f8da21b71becbaf255e8090e0d2648d2758 Mon Sep 17 00:00:00 2001 From: "guillaume.emorine" Date: Thu, 4 Apr 2024 11:03:01 +0200 Subject: [PATCH 2/2] Actualiser sisr1/tp07/files_firewall/current_ruleset_partie_3.nft --- sisr1/tp07/files_firewall/current_ruleset_partie_3.nft | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft index c75fcd5..b9e041e 100644 --- a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft +++ b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft @@ -1,6 +1,7 @@ define netif = enp0s3 define dmzif = enp0s8 define lanif = enp0s9 + define firewall = 192.168.0.120 define ipdmz = 172.16.0.254 define iplan = 10.0.0.254 @@ -9,7 +10,7 @@ table ip ipfilter{ chain prerouting { type filter hook prerouting priority filter; policy drop; icmp type echo-reply accept - icmp type echo-request iif {$lanif} oif {$dmzif} accept + icmp type echo-request iif {$lanif} ip daddr 172.16.0.1-172.16.0.254 accept icmp type echo-request iif {$lanif} ip daddr {$iplan} accept tcp dport 22 accept }