example/cluster.fw

   1 [OPTIONS]
   2
   3 enable: 1
   4
   5 [RULES]
   6
   7 IN  SSH(ACCEPT) vmbr0
   8
   9 [group group1]
  10
  11 IN  ACCEPT - - tcp 22 -
  12 OUT ACCEPT - - tcp 80 -
  13 OUT ACCEPT - - icmp - -
  14
  15 [group group3]
  16
  17 IN  ACCEPT 10.0.0.1
  18 IN  ACCEPT 10.0.0.2
  19 IN  ACCEPT 10.0.0.2
  20
  21
  22 [netgroup mynetgroup]
  23
  24 192.168.0.1 #mycomment
  25 172.16.0.10
  26 192.168.0.0/24
  27 ! 10.0.0.0/8  #nomatch
  28