implement ipset ip/net groups

[pve-firewall.git] / example / groups.fw

diff --git a/example/groups.fw b/example/groups.fw
index eab4b2d554080e55a7676edfd9251370a542c298..b9c088fb58160b7231b25bcc6c3a6a41af0d2278 100644 (file)
--- a/example/groups.fw
+++ b/example/groups.fw
@@ -10,3 +10,23 @@ IN  ACCEPT 10.0.0.1
 IN  ACCEPT 10.0.0.2
 IN  ACCEPT 10.0.0.2 
 
+
+#ipset hash:ip
+[ipgroup ipgroup1]
+
+192.168.0.1
+192.168.0.2
+192.168.0.3
+
+
+[ipgroup ipgroup2]
+
+192.168.0.3
+192.168.0.4
+
+#ipset hash:net
+[netgroup netgroup1]
+
+192.168.0.0/24
+10.0.0.0/8
+