
#Rules for FORWARD



#http lan vers internet (acl 1)
-A DMZ-INTERNET -p tcp --dport 80 --sport 1024:65535 -d 0.0.0.0/0 -m state --state NEW --syn -j ACCEPT  # 1 2

#https lan vers internet (acl 2)
-A DMZ-INTERNET -p tcp --dport 443 --sport 1024:65535 -d 0.0.0.0/0 -m state --state NEW --syn -j ACCEPT  # 2 2





#https lan vers internet (acl 2)
-A INTRANET-INTERNET -p tcp --dport 443 --sport 1024:65535 -d 0.0.0.0/0 -m state --state NEW --syn -j ACCEPT  # 2 1

#http lan vers internet (acl 1)
-A INTRANET-INTERNET -p tcp --dport 80 --sport 1024:65535 -d 0.0.0.0/0 -m state --state NEW --syn -j ACCEPT  # 1 1


-A INTERNET-DMZ -j ULOG --ulog-prefix "INTERNET-DMZ"
-A INTERNET-DMZ -j DROP

-A INTERNET-INTRANET -j ULOG --ulog-prefix "INTERNET-INTRANET"
-A INTERNET-INTRANET -j DROP

-A DMZ-INTERNET -j ULOG --ulog-prefix "DMZ-INTERNET"
-A DMZ-INTERNET -j DROP

-A DMZ-INTRANET -j ULOG --ulog-prefix "DMZ-INTRANET"
-A DMZ-INTRANET -j DROP

-A INTRANET-INTERNET -j ULOG --ulog-prefix "INTRANET-INTERNET"
-A INTRANET-INTERNET -j DROP

-A INTRANET-DMZ -j ULOG --ulog-prefix "INTRANET-DMZ"
-A INTRANET-DMZ -j DROP

