bump version to 5.0.4

[pve-firewall.git] / debian / example / cluster.fw

diff --git a/debian/example/cluster.fw b/debian/example/cluster.fw
index daa9ef5a2c62832b0c4e670cb5b9670114fad825..f0555e99686dd136b1fb62d0e629db114f7b9af4 100644 (file)
--- a/debian/example/cluster.fw
+++ b/debian/example/cluster.fw
@@ -11,6 +11,9 @@ policy_out: ACCEPT
 
 myserveralias 10.0.0.111
 mynetworkalias 10.0.0.0/24
 
 myserveralias 10.0.0.111
 mynetworkalias 10.0.0.0/24

+myserveraliasipv6 2001:db8:0:85a3:0:0:ac1f:8001
+myserveraliasipv6short 2001:db8:0:85a3::ac1f:8001
+

 
 [RULES]
 
 
 [RULES]
 


@@ -29,7 +32,8 @@ IN  ACCEPT -source 10.0.0.1-10.0.0.10
 IN  ACCEPT -source 10.0.0.1,10.0.0.2,10.0.0.3
 IN  ACCEPT -source +mynetgroup 
 IN  ACCEPT -source myserveralias
 IN  ACCEPT -source 10.0.0.1,10.0.0.2,10.0.0.3
 IN  ACCEPT -source +mynetgroup 
 IN  ACCEPT -source myserveralias

-
+IN  ACCEPT -source myserveraliasipv6
+IN  ACCEPT -source 2001:db8:0:85a3:0:0:ac1f:8001

 
 [ipset myipset]
 
 
 [ipset myipset]
 


@@ -38,9 +42,12 @@ IN  ACCEPT -source myserveralias
 192.168.0.0/24
 ! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer
 mynetworkalias
 192.168.0.0/24
 ! 10.0.0.0/8  #nomatch - needs kernel 3.7 or newer
 mynetworkalias

+2001:db8:0:85a3::ac1f:8001
+2001:db8:0:85a3:0:0:ac1f:8002

 
 #global ipset blacklist
 [ipset blacklist]
 
 10.0.0.8
 192.168.0.0/24
 
 #global ipset blacklist
 [ipset blacklist]
 
 10.0.0.8
 192.168.0.0/24

+2001:db8:0:85a3:0:0:ac1f:8001