nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Renommé : sisr1/tp07/files_firewall/current_ruleset_v1.nft -> sisr1/tp07/files_firewall/current_ruleset_partie_1.nft

Browse Source 
Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_2.nft
	Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_3.nft
This commit is contained in:
Guillaume Emorine
2024-04-04 09:28:50 +02:00
parent 813a727ab0
commit 10a3b3ccb8
3 changed files with 61 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
sisr1/tp07/files_firewall/current_ruleset_partie_1.nft Normal file
View File

@@ -0,0 +1,17 @@
define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9
table ip ipfilter {
chain routing {
type filter hook forward priority filter; policy accept;
icmp type echo-request iif { $netif, $dmzif } drop
icmp type { echo-reply, echo-request } accept
drop
}
chain system_in {
type filter hook input priority filter; policy accept;
icmp type echo-request iif { $netif, $dmzif } drop
}
}