mirror of
git://git.proxmox.com/git/pve-firewall.git
synced 2025-02-07 05:57:33 +03:00
eb399cef48
The uses can setup a 'management' IPSet to make sure he has access to the GUI from those IPs.
21 lines
1.0 KiB
Plaintext
21 lines
1.0 KiB
Plaintext
{ from => 'outside', to => 'vm100', source => '192.168.4.1', dport => 22, action => 'DROP' }
|
|
{ from => 'outside', to => 'vm100', source => '192.168.3.1', dport => 22, action => 'ACCEPT' }
|
|
|
|
{ from => 'host', source => '192.168.2.1', dport => 22, action => 'ACCEPT' }
|
|
{ from => 'host', source => '192.168.2.1', dport => 443, action => 'REJECT' }
|
|
{ from => 'host', source => '192.168.2.1', dport => 80, action => 'REJECT' }
|
|
{ from => 'host', source => '127.0.0.1', dport => 80, action => 'ACCEPT' }
|
|
|
|
{ to => 'host', source => '1.2.3.4', dport => 22, action => 'DROP' }
|
|
{ to => 'host', source => '192.168.2.1', dport => 22, action => 'ACCEPT' }
|
|
{ to => 'host', source => '192.168.2.1', dport => 80, action => 'REJECT' }
|
|
|
|
{ to => 'vm100', source => '192.168.3.1', dport => 22, action => 'ACCEPT' }
|
|
{ to => 'vm100', source => '192.168.4.1', dport => 22, action => 'DROP' }
|
|
|
|
{ from => 'outside', to => 'ct200', source => '192.168.6.1', dport => 22, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'ct200', source => '192.168.7.1', dport => 22, action => 'DROP' }
|
|
|
|
|
|
|