projects / pve-firewall.git / blame
| Commit | Line | Data |
|---|---|---|
| c4a2e5ae DM |
1 | [OPTIONS] |
| 2 | ||
| 3 | enable: 1 | |
| 4 | ||
| 5 | [RULES] | |
| 6 | ||
| 7 | IN SSH(ACCEPT) vmbr0 | |
| 8 | ||
| 92e976b3 DM |
9 | [group group1] |
| 10 | ||
| 11 | IN ACCEPT - - tcp 22 - | |
| 12 | OUT ACCEPT - - tcp 80 - | |
| 13 | OUT ACCEPT - - icmp - - | |
| 14 | ||
| 15 | [group group3] | |
| 16 | ||
| 17 | IN ACCEPT 10.0.0.1 | |
| 18 | IN ACCEPT 10.0.0.2 | |
| 19 | IN ACCEPT 10.0.0.2 | |
| 20 | ||
| 34cdedfa AD |
21 | |
| 22 | #ipset hash:ip | |
| 23 | [ipgroup ipgroup1] | |
| 24 | ||
| 25 | 192.168.0.1 | |
| 26 | 192.168.0.2 | |
| 27 | 192.168.0.3 | |
| 28 | ||
| 29 | ||
| 30 | [ipgroup ipgroup2] | |
| 31 | ||
| 32 | 192.168.0.3 | |
| 33 | 192.168.0.4 | |
| 34 | ||
| 35 | #ipset hash:net | |
| 36 | [netgroup netgroup1] | |
| 37 | ||
| 38 | 192.168.0.0/24 | |
| 39 | 10.0.0.0/8 | |
| 40 |