nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Actualiser sisr1/tp07/files_firewall/current_ruleset_partie_3.nft

Browse Source
This commit is contained in:
guillaume.emorine 2024-04-04 11:03:01 +02:00
parent e78483c48a
commit eb2c9f8da2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sisr1/tp07/files_firewall/current_ruleset_partie_3.nft
View File

@ -1,6 +1,7 @@
define netif = enp0s3 define netif = enp0s3
define dmzif = enp0s8 define dmzif = enp0s8
define lanif = enp0s9 define lanif = enp0s9
define firewall = 192.168.0.120 define firewall = 192.168.0.120
define ipdmz = 172.16.0.254 define ipdmz = 172.16.0.254
define iplan = 10.0.0.254 define iplan = 10.0.0.254
@ -9,7 +10,7 @@ table ip ipfilter{
chain prerouting { chain prerouting {
type filter hook prerouting priority filter; policy drop; type filter hook prerouting priority filter; policy drop;
icmp type echo-reply accept icmp type echo-reply accept
icmp type echo-request iif {$lanif} oif {$dmzif} accept icmp type echo-request iif {$lanif} ip daddr 172.16.0.1-172.16.0.254 accept
icmp type echo-request iif {$lanif} ip daddr {$iplan} accept icmp type echo-request iif {$lanif} ip daddr {$iplan} accept
tcp dport 22 accept tcp dport 22 accept
} }