Autorise les bannis à voir la roulette

This commit is contained in:
Hugo Levy-Falk 2020-01-20 11:49:05 +01:00 committed by root
parent 44ed75a4ad
commit 4705ca5e7b

View file

@ -19,9 +19,17 @@ table inet firewall {
set ip_roulette {
type ipv4_addr
}
set allowed_roulette {
type ipv4_addr
elements = {
10.7.0.4,
92.242.132.24
}
}
chain roulette {
ip saddr @ip_roulette ip daddr != 92.242.132.24 drop
ip daddr @ip_roulette ip saddr != 92.242.132.24 drop
ip saddr @ip_roulette ip daddr != @allowed_roulette drop
ip daddr @ip_roulette ip saddr != @allowed_roulette drop
}
}