# @sysconfdir@/firewall.d/ipsets
#
#  Host Specific IP Sets for Linux Server
#
#  THIS FILE IS INTENDED TO CONTAIN FIREWALL RULES SPECIFIC TO AN INDIVIDUAL
#  SERVER.
#
#  USE ONE OF THE FOLLOWING FILES FOR GLOBAL RULES:
#     @sysconfdir@/firewall.d/global.d/ipsets
#     @sysconfdir@/firewall.d/global.d/rules
#     @sysconfdir@/firewall.d/global.d/rules4
#     @sysconfdir@/firewall.d/global.d/rules6
#
#  USE ONE OF THE FOLLOWING FILES FOR SERVER CLUSTER RULES:
#     @sysconfdir@/firewall.d/cluster.d/ipsets
#     @sysconfdir@/firewall.d/cluster.d/rules
#     @sysconfdir@/firewall.d/cluster.d/rules4
#     @sysconfdir@/firewall.d/cluster.d/rules6
#
#  USE ONE OF THE FOLLOWING FILES FOR APPLICATION RULES:
#     @sysconfdir@/firewall.d/apps.d/<app name>/ipsets
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules4
#     @sysconfdir@/firewall.d/apps.d/<app name>/rules6
#


######################
#                    #
#  Private Networks  #
#                    #
######################

create PRIVATE4 hash:ip family inet  hashsize 1024 comment
create PRIVATE6 hash:ip family inet6 hashsize 1024 comment
create PRIVATE  list:set
add PRIVATE PRIVATE4
add PRIVATE PRIVATE6
add PRIVATE4 10.0.0.0/8    "rfc1918"
add PRIVATE4 172.16.0.0/12 "rfc1918"
add PRIVATE4 192.168.0.0/1 "rfc1918"
add PRIVATE6 fc00::/7      "rfc4193"
add PRIVATE6 fe80::/10     "rfc4291"


# end of rules