test/test-group1/cluster.fw

   1 [OPTIONS]
   2
   3 enable: 1
   4
   5 [GROUP group1]
   6
   7 IN ACCEPT -source 192.168.2.0/24 -p tcp -dport 22
   8 IN REJECT -source 192.168.2.0/24 -p tcp -dport 80
   9 OUT REJECT -source 192.168.2.0/24 -p tcp -dport 80
  10 OUT REJECT -p tcp -dport 443
  11
  12 [GROUP group2]
  13
  14 IN ACCEPT -source 192.168.3.0/24 -p tcp -dport 22
  15
  16 [GROUP group3]
  17
  18 IN ACCEPT -source 192.168.6.0/24 -p tcp -dport 22