forked from guillaume.emorine/siotp
18 lines
409 B
Plaintext
18 lines
409 B
Plaintext
define netif = enp0s3
|
|
define dmzif = enp0s8
|
|
define lanif = enp0s9
|
|
|
|
table ip ipfilter {
|
|
chain routing {
|
|
type filter hook forward priority filter; policy accept;
|
|
icmp type echo-request iif { $netif, $dmzif } drop
|
|
icmp type { echo-reply, echo-request } accept
|
|
drop
|
|
}
|
|
|
|
chain system_in {
|
|
type filter hook input priority filter; policy accept;
|
|
icmp type echo-request iif { $netif, $dmzif } drop
|
|
}
|
|
}
|