2019-01-09 12:15:20 +00:00
|
|
|
|
2019-02-09 09:23:05 +00:00
|
|
|
table firewall {
|
2019-01-09 12:15:20 +00:00
|
|
|
chain global {
|
|
|
|
# Interdiction de l'encapsulation ipv6 dans ipv4
|
|
|
|
ip protocol 6 drop;
|
|
|
|
|
|
|
|
# Gestion de l'ICMP :
|
|
|
|
# On empêche le ping flood
|
|
|
|
icmp type echo-request limit rate over 50/second drop;
|
2019-02-09 09:23:05 +00:00
|
|
|
ip protocol icmp accept;
|
2019-01-09 12:15:20 +00:00
|
|
|
}
|
|
|
|
}
|