firewall/sisr1/tp07/files_firewall/current_ruleset_partie_1.nft

define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9

table ip ipfilter {
	chain routing {
		type filter hook forward priority filter; policy accept;
		icmp type echo-request iif { $netif, $dmzif } drop
		icmp type { echo-reply, echo-request } accept
		drop
	}

	chain system_in {
		type filter hook input priority filter; policy accept;
		icmp type echo-request iif { $netif, $dmzif } drop
	}
}