# Generated by Network Security Policy Compiler, version 2.170

# [ BEGIN router:rome ]
# [ Model = Linux ]
# [ Routing ]
! route network:north -> interface:paris.mediteran
ip route add 10.1.1.0/24 via 10.2.2.1
# [ ACL ]

# interface:rome.mediteran
iptables -N eth1_in
iptables -N eth1_self
# permit src=interface:paris.mediteran; dst=interface:rome.mediteran; srv=service:http;
iptables -A eth1_self -j ACCEPT -s 10.2.2.1 -d 10.2.2.2 -p tcp -dport 80
# permit src=interface:paris.north; dst=interface:rome.south; srv=service:http;
iptables -A eth1_self -j ACCEPT -s 10.1.1.2 -d 10.3.3.1 -p tcp -dport 80
# deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
iptables -A eth1_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 
# permit src=network:north; dst=network:south; srv=service:TCP_All;
iptables -A eth1_in -j ACCEPT -s 10.1.1.0/24 -d 10.3.3.0/24 -p tcp
# deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
iptables -A eth1_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 

# interface:rome.south
iptables -N eth0_in
iptables -N eth0_self
# deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
iptables -A eth0_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 
# permit src=network:south; dst=network:north; srv=service:http;
iptables -A eth0_in -j ACCEPT -s 10.3.3.0/24 -d 10.1.1.0/24 -p tcp -dport 80
# permit src=network:south; dst=interface:paris.north; srv=service:telnet;
iptables -A eth0_in -j ACCEPT -s 10.3.3.0/24 -d 10.1.1.2 -p tcp -dport 23
# deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
iptables -A eth0_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 

iptables -P INPUT DROP
iptables -F INPUT
iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -j eth1_self -i eth1 
iptables -A INPUT -j eth0_self -i eth0 
iptables -A INPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0
iptables -P FORWARD DROP
iptables -F FORWARD
iptables -A FORWARD -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -j eth1_in -i eth1
iptables -A FORWARD -j eth0_in -i eth0
iptables -A FORWARD -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0
# [ END router:rome ]