firewall/global_policy.nft

12 lines
267 B
Text
Raw Normal View History

2019-01-09 12:15:20 +00:00
2019-03-12 21:06:21 +00:00
table inet firewall {
2019-01-09 12:15:20 +00:00
chain global {
2019-03-12 21:06:21 +00:00
# On accepte les connexions déjà établies
ct state established,related accept
2019-01-09 12:15:20 +00:00
# Gestion de l'ICMP :
# On empêche le ping flood
icmp type echo-request limit rate over 50/second drop;
2019-02-09 09:23:05 +00:00
ip protocol icmp accept;
2019-01-09 12:15:20 +00:00
}
}