nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Renommé : sisr1/tp07/files_firewall/current_ruleset_v1.nft -> sisr1/tp07/files_firewall/current_ruleset_partie_1.nft

Browse Source 
Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_2.nft
	Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_3.nft
This commit is contained in:
Guillaume Emorine 2024-04-04 09:28:50 +02:00
parent 813a727ab0
commit 10a3b3ccb8
3 changed files with 61 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
sisr1/tp07/files_firewall/current_ruleset_v1.nft → sisr1/tp07/files_firewall/current_ruleset_partie_1.nft
View File

25
sisr1/tp07/files_firewall/current_ruleset_partie_2.nft Normal file
View File

@ -0,0 +1,25 @@
define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9
table ip ipfilter{
chain prerouting {
type filter hook prerouting priority filter; policy drop;
tcp dport 22 accept
}
chain system_in {
type filter hook input priority filter; policy drop;
tcp dport 22 accept
}
chain routing {
type filter hook forward priority filter; policy drop;
}
chain system_out {
type filter hook output priority filter; policy drop;
tcp sport 22 accept
}
chain postrouting {
type filter hook postrouting priority filter; policy drop;
tcp sport 22 accept
}
}

36
sisr1/tp07/files_firewall/current_ruleset_partie_3.nft Normal file
View File

@ -0,0 +1,36 @@
define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9
table ip ipfilter{
chain prerouting {
type filter hook prerouting priority filter; policy drop;
icmp type echo-reply accept
icmp type echo-request iif {$lanif} accept
tcp dport 22 accept
}
chain system_in {
type filter hook input priority filter; policy drop;
icmp type echo-reply accept
icmp type echo-request iif {$lanif} accept
tcp dport 22 accept
}
chain routing {
type filter hook forward priority filter; policy drop;
icmp type echo-request iif {$lanif} accept
icmp type echo-reply oif {$lanif} accept
}
chain system_out {
type filter hook output priority filter; policy drop;
icmp type echo-reply oif {$lanif} accept
icmp type echo-request accept
tcp sport 22 accept
}
chain postrouting {
type filter hook postrouting priority filter; policy drop;
icmp type echo-request ip saddr {192.168.0.120, 10.0.0.254, 172.16.0.254} accept
icmp type echo-reply oif {$lanif} accept
icmp type echo-request iif {$lanif} accept
tcp sport 22 accept
}
}