table inet firewall {
	chain global {
		# On accepte les connexions déjà établies
		ct state established,related accept
		# Gestion de l'ICMP :
		# On empêche le ping flood
		icmp type echo-request limit rate over 50/second drop;
		ip protocol icmp accept;
	}
}