add aliases feature

[pve-firewall.git] / debian / example / cluster.fw

diff --git a/debian/example/cluster.fw b/debian/example/cluster.fw
index e9a57eae1e8a5e03adc51b7480f23d8bcc663700..bf5a98f2df46b1677c52af44099c76afb0cfd9b5 100644 (file)
--- a/debian/example/cluster.fw
+++ b/debian/example/cluster.fw
@@ -7,6 +7,11 @@ enable: 1
 policy_in: DROP
 policy_out: ACCEPT
 
 policy_in: DROP
 policy_out: ACCEPT
 

+[ALIASES]
+
+myserveralias 10.0.0.111
+mynetworkalias 10.0.0.0/24
+

 [RULES]
 
 IN  SSH(ACCEPT) vmbr0
 [RULES]
 
 IN  SSH(ACCEPT) vmbr0


@@ -23,6 +28,7 @@ IN  ACCEPT 10.0.0.1
 IN  ACCEPT 10.0.0.1-10.0.0.10
 IN  ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3
 IN  ACCEPT +mynetgroup 
 IN  ACCEPT 10.0.0.1-10.0.0.10
 IN  ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3
 IN  ACCEPT +mynetgroup 

+IN  ACCEPT myserveralias

 
 
 [ipset myipset]
 
 
 [ipset myipset]


@@ -31,4 +37,4 @@ IN  ACCEPT +mynetgroup
 172.16.0.10
 192.168.0.0/24
 ! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer
 172.16.0.10
 192.168.0.0/24
 ! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer

-
+mynetworkalias