182 lines
3.3 KiB
JSON
182 lines
3.3 KiB
JSON
[
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related,untracked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"port": "33434-33534",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"dst-port": "546",
|
|
"protocol": "udp",
|
|
"src-address": "fe80::/10"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"dst-port": "500,4500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-ah"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-esp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"ipsec-policy": "in,ipsec"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"in-interface-list": "!LAN"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related,untracked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"src-address-list": "bad_ipv6"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"dst-address-list": "bad_ipv6"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"hop-limit": "equal:1",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "139"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"dst-port": "500,4500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-ah"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-esp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"ipsec-policy": "in,ipsec"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"in-interface-list": "!LAN"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "Allow",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "Allow",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Openfactory"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Cloudflare"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "PaloAlto"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
}
|
|
] |