nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Modifié : sisr1/tp07/files_firewall/current_ruleset_v1.nft

Browse Source
This commit is contained in:
Guillaume Emorine 2024-04-02 17:10:35 +02:00
parent 575f83d1e9
commit 813a727ab0
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sisr1/tp07/files_firewall/current_ruleset_v1.nft
View File

@ -1,13 +1,17 @@
define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9
table ip ipfilter { table ip ipfilter {
chain routing { chain routing {
type filter hook forward priority filter; policy accept; type filter hook forward priority filter; policy accept;
icmp type echo-request iif { "enp0s3", "enp0s8" } drop icmp type echo-request iif { $netif, $dmzif } drop
icmp type { echo-reply, echo-request } accept icmp type { echo-reply, echo-request } accept
drop drop
} }
chain system_in { chain system_in {
type filter hook input priority filter; policy accept; type filter hook input priority filter; policy accept;
icmp type echo-request iif { "enp0s3", "enp0s8" } drop icmp type echo-request iif { $netif, $dmzif } drop
} }
} }