implemented ipset rules in iptables

[pve-firewall.git] / example / cluster.fw

diff --git a/example/cluster.fw b/example/cluster.fw
index 97f58cbda6f8c399b00860f337314eca8eef1415..8af85f65d1efc7b12cc98d454ef5798a59017212 100644 (file)
--- a/example/cluster.fw
+++ b/example/cluster.fw
@@ -15,8 +15,9 @@ OUT ACCEPT - - icmp - -
 [group group3]
 
 IN  ACCEPT 10.0.0.1 
-IN  ACCEPT 10.0.0.2
-IN  ACCEPT 10.0.0.2 
+IN  ACCEPT 10.0.0.1-10.0.0.10
+IN  ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3
+IN  ACCEPT +mynetgroup 
 
 
 [netgroup mynetgroup]