From eab740c071cc8e1c503ae809cb31a92250a6541c Mon Sep 17 00:00:00 2001 From: Guillaume Emorine Date: Thu, 4 Apr 2024 11:00:59 +0200 Subject: [PATCH] =?UTF-8?q?=09Modifi=C3=A9=C2=A0:=20=20=20=20=20=20=20=20?= =?UTF-8?q?=20sisr1/tp07/files=5Ffirewall/current=5Fruleset=5Fpartie=5F3.n?= =?UTF-8?q?ft?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- sisr1/tp07/files_firewall/current_ruleset_partie_3.nft | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft index a83f2d2..b9e041e 100644 --- a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft +++ b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft @@ -1,6 +1,7 @@ define netif = enp0s3 define dmzif = enp0s8 define lanif = enp0s9 + define firewall = 192.168.0.120 define ipdmz = 172.16.0.254 define iplan = 10.0.0.254 @@ -9,8 +10,8 @@ table ip ipfilter{ chain prerouting { type filter hook prerouting priority filter; policy drop; icmp type echo-reply accept - icmp type echo-request iif {$lanif} oif {$dmzif} accept - icmp type echo-request iif {$lanif} ip daddr {$iplan} + icmp type echo-request iif {$lanif} ip daddr 172.16.0.1-172.16.0.254 accept + icmp type echo-request iif {$lanif} ip daddr {$iplan} accept tcp dport 22 accept } chain system_in {