example/cluster.fw

   1 [group group1]
   2
   3 IN  ACCEPT - - tcp 22 -
   4 OUT ACCEPT - - tcp 80 -
   5 OUT ACCEPT - - icmp - -
   6
   7 [group group3]
   8
   9 IN  ACCEPT 10.0.0.1
  10 IN  ACCEPT 10.0.0.2
  11 IN  ACCEPT 10.0.0.2
  12
  13
  14 #ipset hash:ip
  15 [ipgroup ipgroup1]
  16
  17 192.168.0.1
  18 192.168.0.2
  19 192.168.0.3
  20
  21
  22 [ipgroup ipgroup2]
  23
  24 192.168.0.3
  25 192.168.0.4
  26
  27 #ipset hash:net
  28 [netgroup netgroup1]
  29
  30 192.168.0.0/24
  31 10.0.0.0/8
  32