mirror of
https://git.proxmox.com/git/pve-firewall
synced 2025-08-14 18:55:17 +00:00
6f6a6b3f82
Since corosync rules are now only created when a corosync.conf file is present, a static corosync.conf has been added and will be loaded for testing. New test rules have been introduced to check corosync rules relating to different rings/links. Includes hostnames in config to trigger resolving codepaths. Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>
46 lines
3.4 KiB
Plaintext
46 lines
3.4 KiB
Plaintext
{ from => 'outside', to => 'host', action => 'DROP' }
|
|
{ from => 'host', to => 'outside', action => 'DROP' }
|
|
|
|
# traffic to other node
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 21, action => 'DROP' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 22, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 3128, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 8006, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 5900, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 5999, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', dport => 6000, action => 'DROP' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5404, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5405, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.1.3', proto => 'udp', dport => 5406, action => 'DROP' }
|
|
{ from => 'host', to => 'outside', dest => '239.192.158.83', proto => 'udp', dport => 5404, dsttype => 'UNICAST', action => 'DROP' }
|
|
{ from => 'host', to => 'outside', dest => '239.192.158.83', proto => 'udp', dport => 5404, dsttype => 'MULTICAST', action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', source => '172.16.2.2', dest => '172.16.2.3', proto => 'udp', dport => 5404, action => 'ACCEPT' }
|
|
{ from => 'host', to => 'outside', dest => '172.16.2.3', proto => 'udp', dport => 5404, action => 'DROP' }
|
|
|
|
|
|
# traffic from other node
|
|
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 21, action => 'DROP' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 22, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 3128, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 8006, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 5900, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 5999, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dport => 6000, action => 'DROP' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5404, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5405, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', proto => 'udp', dport => 5406, action => 'DROP' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dest => '239.192.158.83', proto => 'udp', dport => 5404, dsttype => 'UNICAST', action => 'DROP' }
|
|
{ from => 'outside', to => 'host', source => '172.16.1.3', dest => '239.192.158.83', proto => 'udp', dport => 5404, dsttype => 'MULTICAST', action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.2.11', dest => '172.16.2.2', proto => 'udp', dport => 5404, action => 'ACCEPT' }
|
|
{ from => 'outside', to => 'host', source => '172.16.2.11', dest => '172.16.1.2', proto => 'udp', dport => 5404, action => 'DROP' }
|
|
|
|
|
|
{ from => 'host', to => 'ct200', action => 'DROP' }
|
|
{ from => 'outside', to => 'ct200', action => 'ACCEPT' }
|
|
{ to => 'ct201', action => 'DROP' }
|
|
{ from => 'host', to => 'vm100', action => 'DROP' }
|
|
{ from => 'outside', to => 'vm100', action => 'ACCEPT' }
|
|
{ to => 'vm101', action => 'DROP' }
|
|
|