12 lines
251 B
Text
12 lines
251 B
Text
|
|
table firewall {
|
|
chain global {
|
|
# Interdiction de l'encapsulation ipv6 dans ipv4
|
|
ip protocol 6 drop;
|
|
|
|
# Gestion de l'ICMP :
|
|
# On empêche le ping flood
|
|
icmp type echo-request limit rate over 50/second drop;
|
|
ip protocol icmp accept;
|
|
}
|
|
}
|