This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
сервис_firewall [2025/01/19 08:59] val [nftables] |
сервис_firewall [2025/02/06 12:40] (current) val [nftables] |
||
---|---|---|---|
Line 27: | Line 27: | ||
chain forward { | chain forward { | ||
type filter hook forward priority filter; policy drop; | type filter hook forward priority filter; policy drop; | ||
- | ct state established,related counter packets 0 bytes 0 accept | + | ct state established,related counter accept |
# BMSTU DNS noc@bmstu.ru | # BMSTU DNS noc@bmstu.ru | ||
- | ip daddr 195.19.32.2 udp dport 53 counter packets 0 bytes 0 accept | + | ip daddr 195.19.32.2 udp dport 53 counter accept |
+ | # DMZ NETS noc@bmstu.ru | ||
+ | ip daddr { 195.19.40.0/24, 195.19.50.0/24 } counter accept | ||
# EU eu@bmstu.ru | # EU eu@bmstu.ru | ||
- | ip daddr 195.19.33.59 tcp dport { 80, 443 } counter packets 0 bytes 0 accept | + | ip daddr 195.19.33.59 tcp dport { 80, 443 } counter accept |
# CAS proxy noc@bmstu.ru | # CAS proxy noc@bmstu.ru | ||
- | ip daddr 195.19.33.9 tcp dport 8443 counter packets 0 bytes 0 accept | + | ip daddr 195.19.33.9 tcp dport 8443 counter accept |
+ | # lm.bmstu.ru | ||
+ | ip daddr 195.19.33.222 tcp dport 22 counter drop | ||
+ | ip daddr 195.19.33.222 counter accept | ||
} | } | ||
chain output { | chain output { |