hmz007
36ed224bac
Signed-off-by: hmz007 <hmz007@gmail.com> Change-Id: Ib87fdbe7a0be7dc961af3500fe9ea4589a127f9f
14 lines
629 B
Raku
14 lines
629 B
Raku
:INPUT,FORWARD,OUTPUT
|
|
-p ip --ip-src ! 192.168.0.0/24 -j ACCEPT;-p IPv4 --ip-src ! 192.168.0.0/24 -j ACCEPT;OK
|
|
-p IPv4 --ip-dst 10.0.0.1;=;OK
|
|
-p IPv4 --ip-tos 0xFF;=;OK
|
|
-p IPv4 --ip-tos ! 0xFF;=;OK
|
|
-p IPv4 --ip-proto tcp --ip-dport 22;=;OK
|
|
-p IPv4 --ip-proto udp --ip-sport 1024:65535;=;OK
|
|
-p IPv4 --ip-proto 253;=;OK
|
|
-p IPv4 --ip-proto icmp --ip-icmp-type echo-request;=;OK
|
|
-p IPv4 --ip-proto icmp --ip-icmp-type 1/1;=;OK
|
|
-p ip --ip-protocol icmp --ip-icmp-type ! 1:10;-p IPv4 --ip-proto icmp --ip-icmp-type ! 1:10/0:255 -j CONTINUE;OK
|
|
--ip-proto icmp --ip-icmp-type 1/1;=;FAIL
|
|
! -p ip --ip-proto icmp --ip-icmp-type 1/1;=;FAIL
|