firewall/global_policy.nft

13 lines
244 B
Plaintext
Raw Normal View History

2019-01-09 12:15:20 +00:00
table inet firewall {
chain global {
# Interdiction de l'encapsulation ipv6 dans ipv4
ip protocol 6 drop;
# Gestion de l'ICMP :
# On empêche le ping flood
icmp type echo-request limit rate over 50/second drop;
icmp accept;
}
}