projects / pve-firewall.git / blame
| Commit | Line | Data |
|---|---|---|
| 318d0f92 DM |
1 | { from => 'outside', to => 'host', action => 'DROP' } |
| 2 | { from => 'host', to => 'outside', action => 'DROP' } | |
| 3 | ||
| 4 | # traffic to other node | |
| 5 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 21, action => 'DROP' } | |
| 6 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 22, action => 'ACCEPT' } | |
| 7 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 3128, action => 'ACCEPT' } | |
| 8 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 8006, action => 'ACCEPT' } | |
| 9 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 5900, action => 'ACCEPT' } | |
| 10 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 5999, action => 'ACCEPT' } | |
| 11 | { from => 'host', to => 'outside', dest => '172.16.1.3', dport => 6000, action => 'DROP' } | |
| 12 | { from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5404, action => 'ACCEPT' } | |
| 13 | { from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5405, action => 'ACCEPT' } | |
| 14 | { from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5406, action => 'DROP' } | |
| 15 | ||
| 16 | ||
| 17 | # traffic from other node | |
| 18 | ||
| 19 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 21, action => 'DROP' } | |
| 20 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 22, action => 'ACCEPT' } | |
| 21 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 3128, action => 'ACCEPT' } | |
| 22 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 8006, action => 'ACCEPT' } | |
| 23 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 5900, action => 'ACCEPT' } | |
| 24 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 5999, action => 'ACCEPT' } | |
| 25 | { from => 'outside', to => 'host', source => '172.16.1.3', dport => 6000, action => 'DROP' } | |
| 26 | { from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5404, action => 'ACCEPT' } | |
| 27 | { from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5405, action => 'ACCEPT' } | |
| 28 | { from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5406, action => 'DROP' } | |
| 29 | ||
| 30 | ||
| 31 | { from => 'host', to => 'ct200', action => 'DROP' } | |
| 32 | { from => 'outside', to => 'ct200', action => 'ACCEPT' } | |
| 33 | { to => 'ct201', action => 'DROP' } | |
| 34 | { from => 'host', to => 'vm100', action => 'DROP' } | |
| 35 | { from => 'outside', to => 'vm100', action => 'ACCEPT' } | |
| 36 | { to => 'vm101', action => 'DROP' } | |
| 37 |