Il ne faut pas accepter dans les chaines from
This commit is contained in:
parent
230d583110
commit
f7269696c7
1 changed files with 2 additions and 2 deletions
|
@ -47,8 +47,8 @@ table inet firewall {
|
||||||
}
|
}
|
||||||
|
|
||||||
chain from_dmz {
|
chain from_dmz {
|
||||||
ip saddr . tcp dport @dmz_allowed_tcp_out accept;
|
not ip saddr . tcp dport @dmz_allowed_tcp_out drop;
|
||||||
ip saddr . udp dport @dmz_allowed_udp_out accept;
|
not ip saddr . udp dport @dmz_allowed_udp_out drop;
|
||||||
}
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue