
#Rules for FORWARD



#ftp internet vers dmz (acl 1)
-A INTERNET-DMZ -p tcp --dport 21 --sport 1024:65535 -d 192.168.33.0/25 -m state --state NEW --syn -j ACCEPT  # 1 1


-A INTERNET-DMZ -j ULOG --ulog-prefix "INTERNET-DMZ"
-A INTERNET-DMZ -j DROP

-A INTERNET-INTRANET -j ULOG --ulog-prefix "INTERNET-INTRANET"
-A INTERNET-INTRANET -j DROP

-A DMZ-INTERNET -j ULOG --ulog-prefix "DMZ-INTERNET"
-A DMZ-INTERNET -j DROP

-A DMZ-INTRANET -j ULOG --ulog-prefix "DMZ-INTRANET"
-A DMZ-INTRANET -j DROP

-A INTRANET-INTERNET -j ULOG --ulog-prefix "INTRANET-INTERNET"
-A INTRANET-INTERNET -j DROP

-A INTRANET-DMZ -j ULOG --ulog-prefix "INTRANET-DMZ"
-A INTRANET-DMZ -j DROP

