# Generated by Network Security Policy Compiler, version 2.170 # [ BEGIN router:gibraltar ] # [ Model = Linux ] # [ Routing ] # [ ACL ] # interface:gibraltar.ocean iptables -N eth0_in iptables -N eth0_self # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth0_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth0_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # interface:gibraltar.sahara iptables -N eth1_in iptables -N eth1_self # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth1_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth1_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # interface:gibraltar.to_equator iptables -N eth2_in iptables -N eth2_self # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth2_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth2_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # interface:gibraltar.to_equator2 iptables -N eth3_in iptables -N eth3_self # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth3_self -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip; iptables -A eth3_in -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 iptables -P INPUT DROP iptables -F INPUT iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED iptables -A INPUT -j eth0_self -i eth0 iptables -A INPUT -j eth1_self -i eth1 iptables -A INPUT -j eth2_self -i eth2 iptables -A INPUT -j eth3_self -i eth3 iptables -A INPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 iptables -P FORWARD DROP iptables -F FORWARD iptables -A FORWARD -j ACCEPT -m state --state ESTABLISHED,RELATED iptables -A FORWARD -j eth0_in -i eth0 iptables -A FORWARD -j eth1_in -i eth1 iptables -A FORWARD -j eth2_in -i eth2 iptables -A FORWARD -j eth3_in -i eth3 iptables -A FORWARD -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 # [ END router:gibraltar ]