12 lines
267 B
Plaintext
12 lines
267 B
Plaintext
|
|
table inet firewall {
|
|
chain global {
|
|
# On accepte les connexions déjà établies
|
|
ct state established,related accept
|
|
# Gestion de l'ICMP :
|
|
# On empêche le ping flood
|
|
icmp type echo-request limit rate over 50/second drop;
|
|
ip protocol icmp accept;
|
|
}
|
|
}
|