diff --git a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft index c75fcd5..b9e041e 100644 --- a/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft +++ b/sisr1/tp07/files_firewall/current_ruleset_partie_3.nft @@ -1,6 +1,7 @@ define netif = enp0s3 define dmzif = enp0s8 define lanif = enp0s9 + define firewall = 192.168.0.120 define ipdmz = 172.16.0.254 define iplan = 10.0.0.254 @@ -9,7 +10,7 @@ table ip ipfilter{ chain prerouting { type filter hook prerouting priority filter; policy drop; icmp type echo-reply accept - icmp type echo-request iif {$lanif} oif {$dmzif} accept + icmp type echo-request iif {$lanif} ip daddr 172.16.0.1-172.16.0.254 accept icmp type echo-request iif {$lanif} ip daddr {$iplan} accept tcp dport 22 accept }