X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=blobdiff_plain;f=debian%2Fexample%2Fcluster.fw;h=bf5a98f2df46b1677c52af44099c76afb0cfd9b5;hp=e9a57eae1e8a5e03adc51b7480f23d8bcc663700;hb=92e1209bfb984c18735dbc73ac929fb0a9832b52;hpb=bce209cf6ad43f656a90c395ae07659625781026 diff --git a/debian/example/cluster.fw b/debian/example/cluster.fw index e9a57ea..bf5a98f 100644 --- a/debian/example/cluster.fw +++ b/debian/example/cluster.fw @@ -7,6 +7,11 @@ enable: 1 policy_in: DROP policy_out: ACCEPT +[ALIASES] + +myserveralias 10.0.0.111 +mynetworkalias 10.0.0.0/24 + [RULES] IN SSH(ACCEPT) vmbr0 @@ -23,6 +28,7 @@ IN ACCEPT 10.0.0.1 IN ACCEPT 10.0.0.1-10.0.0.10 IN ACCEPT 10.0.0.1,10.0.0.2,10.0.0.3 IN ACCEPT +mynetgroup +IN ACCEPT myserveralias [ipset myipset] @@ -31,4 +37,4 @@ IN ACCEPT +mynetgroup 172.16.0.10 192.168.0.0/24 ! 10.0.0.0/8 #nomatch - needs kernel 3.7 or newer - +mynetworkalias