[pve-firewall.git] / example / cluster.fw

[OPTIONS]

enable: 1

[RULES]

IN  SSH(ACCEPT) vmbr0

[group group1]

IN  ACCEPT - - tcp 22 -
OUT ACCEPT - - tcp 80 -
OUT ACCEPT - - icmp - -

[group group3]

IN  ACCEPT 10.0.0.1 
IN  ACCEPT 10.0.0.2
IN  ACCEPT 10.0.0.2 


[netgroup mynetgroup]

192.168.0.1 #mycomment
172.16.0.10
192.168.0.0/24
! 10.0.0.0/8  #nomatch
Commit	Line	Data
c4a2e5ae DM	1	[OPTIONS]
	2
	3	enable: 1
	4
	5	[RULES]
	6
	7	IN SSH(ACCEPT) vmbr0
	8
92e976b3 DM	9	[group group1]
	10
	11	IN ACCEPT - - tcp 22 -
	12	OUT ACCEPT - - tcp 80 -
	13	OUT ACCEPT - - icmp - -
	14
	15	[group group3]
	16
	17	IN ACCEPT 10.0.0.1
	18	IN ACCEPT 10.0.0.2
	19	IN ACCEPT 10.0.0.2
	20
34cdedfa	21
2a052ee3	22	[netgroup mynetgroup]
34cdedfa	23
2a052ee3 AD	24	192.168.0.1 #mycomment
2a052ee3 AD	25	172.16.0.10
34cdedfa	26	192.168.0.0/24
2a052ee3	27	! 10.0.0.0/8 #nomatch
34cdedfa	28