blob: fb2785b8b10032abaac376aec6689b731beccfbb (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
# @sysconfdir@/firewall.d/ipsets
#
# Host Specific IP Sets for Linux Server
#
# THIS FILE IS INTENDED TO CONTAIN FIREWALL RULES SPECIFIC TO AN INDIVIDUAL
# SERVER.
#
# USE ONE OF THE FOLLOWING FILES FOR GLOBAL RULES:
# @sysconfdir@/firewall.d/global.d/ipsets
# @sysconfdir@/firewall.d/global.d/rules
# @sysconfdir@/firewall.d/global.d/rules4
# @sysconfdir@/firewall.d/global.d/rules6
#
# USE ONE OF THE FOLLOWING FILES FOR SERVER CLUSTER RULES:
# @sysconfdir@/firewall.d/cluster.d/ipsets
# @sysconfdir@/firewall.d/cluster.d/rules
# @sysconfdir@/firewall.d/cluster.d/rules4
# @sysconfdir@/firewall.d/cluster.d/rules6
#
# USE ONE OF THE FOLLOWING FILES FOR APPLICATION RULES:
# @sysconfdir@/firewall.d/apps.d/<app name>/ipsets
# @sysconfdir@/firewall.d/apps.d/<app name>/rules
# @sysconfdir@/firewall.d/apps.d/<app name>/rules4
# @sysconfdir@/firewall.d/apps.d/<app name>/rules6
#
######################
# #
# Private Networks #
# #
######################
create PRIVATE4 hash:ip family inet hashsize 1024 comment
create PRIVATE6 hash:ip family inet6 hashsize 1024 comment
create PRIVATE list:set
add PRIVATE PRIVATE4
add PRIVATE PRIVATE6
add PRIVATE4 10.0.0.0/8 "rfc1918"
add PRIVATE4 172.16.0.0/12 "rfc1918"
add PRIVATE4 192.168.0.0/1 "rfc1918"
add PRIVATE6 fc00::/7 "rfc4193"
add PRIVATE6 fe80::/10 "rfc4291"
# end of rules
|
