|
|
@@ -18,7 +18,6 @@ |
|
|
|
# Syn: Optional, only match (not) syn packets (syn | notsyn ) |
|
|
|
# State: Optional, set the connection tracking states ( comma separated list ) |
|
|
|
# Custom: Optional, set custom section after the source/dest and before ACCEPT/DROP |
|
|
|
# (must surround with quotes) |
|
|
|
# |
|
|
|
# You can use '-' for optional fields |
|
|
|
#============================================================ |
|
|
@@ -27,4 +26,4 @@ |
|
|
|
#DROP eth1 2002::/64 eth0 2001::/3 no |
|
|
|
#DROP eth0 2001::/3 eth1 2002:dead:beef::/64 no - 1:1024 tcp syn |
|
|
|
#ACCEPT eth1 - eth0 - no - - udp - NEW,ESTABLISHED,RELATED |
|
|
|
#IN ACCEPT eth0 2002:dead:beef::/64 eth1 2002:dead:bfff::/64 yes - - - - - "-m policy --dir in --pol ipsec --proto esp" |
|
|
|
#IN ACCEPT eth0 2002:dead:beef::/64 eth1 2002:dead:bfff::/64 yes - - - - - -m policy --dir in --pol ipsec --proto esp |