2019-01-09 12:15:20 +00:00
|
|
|
|
2019-03-12 21:06:21 +00:00
|
|
|
table inet firewall {
|
2019-01-09 12:15:20 +00:00
|
|
|
chain global {
|
2019-03-12 21:06:21 +00:00
|
|
|
# On accepte les connexions déjà établies
|
|
|
|
|
ct state established,related accept
|
2019-01-09 12:15:20 +00:00
|
|
|
# Gestion de l'ICMP :
|
|
|
|
|
# On empêche le ping flood
|
|
|
|
|
icmp type echo-request limit rate over 50/second drop;
|
2019-02-09 09:23:05 +00:00
|
|
|
ip protocol icmp accept;
|
2019-01-09 12:15:20 +00:00
|
|
|
}
|
|
|
|
|
}
|
