mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-19 17:57:22 +01:00
100dca74bb
branch, running tests. Making sure rules that have firewall object in ODst and interface columnblank end up with rdr command without "on interface" clause as before.
32 lines
825 B
Plaintext
32 lines
825 B
Plaintext
|
|
|
|
|
|
#
|
|
# Rule 0 (NAT)
|
|
nat on dc2 proto {tcp udp icmp} from 192.168.1.0/24 to any -> 192.168.1.1
|
|
nat on { dc0 dc1 } proto {tcp udp icmp} from 192.168.1.0/24 to any -> { 10.1.1.1 , 222.222.222.20 , 222.222.222.21 }
|
|
#
|
|
# Rule 1 (NAT)
|
|
nat on dc1 proto {tcp udp icmp} from 192.168.1.0/24 to any -> 222.222.222.20
|
|
#
|
|
# Rule 2 (NAT)
|
|
nat on dc1 proto {tcp udp icmp} from 192.168.1.0/24 to any -> 222.222.222.20
|
|
#
|
|
# Rule 3 (NAT)
|
|
nat on dc0 proto {tcp udp icmp} from 192.168.1.0/24 to any -> 222.222.222.21
|
|
|
|
#
|
|
# Rule 0 (dc0)
|
|
pass in quick on dc0 inet from any to 222.222.222.22 keep state
|
|
#
|
|
# Rule 1 (dc1)
|
|
pass out quick on dc1 inet from any to 222.222.222.22 keep state
|
|
#
|
|
# Rule 2 (global)
|
|
block quick inet from any to any
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any
|
|
|