Il ne faut pas accepter dans les chaines from
This commit is contained in:
parent
230d583110
commit
f7269696c7
1 changed files with 2 additions and 2 deletions
|
@ -47,8 +47,8 @@ table inet firewall {
|
|||
}
|
||||
|
||||
chain from_dmz {
|
||||
ip saddr . tcp dport @dmz_allowed_tcp_out accept;
|
||||
ip saddr . udp dport @dmz_allowed_udp_out accept;
|
||||
not ip saddr . tcp dport @dmz_allowed_tcp_out drop;
|
||||
not ip saddr . udp dport @dmz_allowed_udp_out drop;
|
||||
}
|
||||
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue