diff --git a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft index a83f2d2..b9e041e 100644 --- a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft +++ b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft @@ -1,6 +1,7 @@ define netif = enp0s3 define dmzif = enp0s8 define lanif = enp0s9 + define firewall = 192.168.0.120 define ipdmz = 172.16.0.254 define iplan = 10.0.0.254 @@ -9,8 +10,8 @@ table ip ipfilter{ chain prerouting { type filter hook prerouting priority filter; policy drop; icmp type echo-reply accept - icmp type echo-request iif {$lanif} oif {$dmzif} accept - icmp type echo-request iif {$lanif} ip daddr {$iplan} + icmp type echo-request iif {$lanif} ip daddr 172.16.0.1-172.16.0.254 accept + icmp type echo-request iif {$lanif} ip daddr {$iplan} accept tcp dport 22 accept } chain system_in {