[pve-firewall.git] / example / cluster.fw

[OPTIONS]

enable: 1

[RULES]

IN  SSH(ACCEPT) vmbr0

[group group1]

IN  ACCEPT - - tcp 22 -
OUT ACCEPT - - tcp 80 -
OUT ACCEPT - - icmp - -

[group group3]

IN  ACCEPT 10.0.0.1 
IN  ACCEPT 10.0.0.1-10.0.0.10
IN  ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3
IN  ACCEPT +mynetgroup 


[ipset myipset]

192.168.0.1 #mycomment
172.16.0.10
192.168.0.0/24
! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer
Commit	Line	Data
c4a2e5ae DM	1	[OPTIONS]
	2
	3	enable: 1
	4
	5	[RULES]
	6
	7	IN SSH(ACCEPT) vmbr0
	8
92e976b3 DM	9	[group group1]
	10
	11	IN ACCEPT - - tcp 22 -
	12	OUT ACCEPT - - tcp 80 -
	13	OUT ACCEPT - - icmp - -
	14
	15	[group group3]
	16
	17	IN ACCEPT 10.0.0.1
ba791b1f AD	18	IN ACCEPT 10.0.0.1-10.0.0.10
	19	IN ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3
	20	IN ACCEPT +mynetgroup
92e976b3	21
34cdedfa	22
936af352	23	[ipset myipset]
34cdedfa	24
2a052ee3 AD	25	192.168.0.1 #mycomment
2a052ee3 AD	26	172.16.0.10
34cdedfa	27	192.168.0.0/24
cbb5d6f3	28	! 10.0.0.0/8 #nomatch - needs kernel 3.7 or newer
34cdedfa	29