11 lines
267 B
Text
11 lines
267 B
Text
|
|
table inet firewall {
|
|
chain global {
|
|
# On accepte les connexions déjà établies
|
|
ct state established,related accept
|
|
# Gestion de l'ICMP :
|
|
# On empêche le ping flood
|
|
icmp type echo-request limit rate over 50/second drop;
|
|
ip protocol icmp accept;
|
|
}
|
|
}
|