firewall/sisr1/tp07/files_firewall/current_ruleset_partie_2.nft
Guillaume Emorine 10a3b3ccb8 Renommé : sisr1/tp07/files_firewall/current_ruleset_v1.nft -> sisr1/tp07/files_firewall/current_ruleset_partie_1.nft
Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_2.nft
	Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset_partie_3.nft
2024-04-04 09:28:50 +02:00

26 lines
684 B
Plaintext

define netif = enp0s3
define dmzif = enp0s8
define lanif = enp0s9
table ip ipfilter{
chain prerouting {
type filter hook prerouting priority filter; policy drop;
tcp dport 22 accept
}
chain system_in {
type filter hook input priority filter; policy drop;
tcp dport 22 accept
}
chain routing {
type filter hook forward priority filter; policy drop;
}
chain system_out {
type filter hook output priority filter; policy drop;
tcp sport 22 accept
}
chain postrouting {
type filter hook postrouting priority filter; policy drop;
tcp sport 22 accept
}
}