
#Rules for FORWARD

#ssh employees vers dmz (acl 1)
#rules is auto



#ssh employees vers dmz (acl 1)
-A INTRANET-DMZ -p tcp --dport 22 --sport 1024:65535 -d 192.168.33.0/25 -m state --state NEW --syn -j NFQUEUE --queue-num 0  # 1 3


-A INTERNET-DMZ -j ULOG --ulog-prefix "INTERNET-DMZ"
-A INTERNET-DMZ -j DROP

-A INTERNET-INTRANET -j ULOG --ulog-prefix "INTERNET-INTRANET"
-A INTERNET-INTRANET -j DROP

-A DMZ-INTERNET -j ULOG --ulog-prefix "DMZ-INTERNET"
-A DMZ-INTERNET -j DROP

-A DMZ-INTRANET -j ULOG --ulog-prefix "DMZ-INTRANET"
-A DMZ-INTRANET -j DROP

-A INTRANET-INTERNET -j ULOG --ulog-prefix "INTRANET-INTERNET"
-A INTRANET-INTERNET -j DROP

-A INTRANET-DMZ -j ULOG --ulog-prefix "INTRANET-DMZ"
-A INTRANET-DMZ -j DROP

