#Generated by nupyf on 2008-10-03 13:27:35.134196 from ./features/acls_ordering.xml

#Rules for FORWARD



#http lan vers internet (acl 1)
-A DMZ-INTERNET -p tcp --dport 80 --sport 1024:65535 -m state --state NEW --syn -j ACCEPT  # 1 2

#https lan vers internet (acl 2)
-A DMZ-INTERNET -p tcp --dport 443 --sport 1024:65535 -m state --state NEW --syn -j ACCEPT  # 2 2





#https lan vers internet (acl 2)
-A INTRANET-INTERNET -p tcp --dport 443 --sport 1024:65535 -m state --state NEW --syn -j ACCEPT  # 2 1

#http lan vers internet (acl 1)
-A INTRANET-INTERNET -p tcp --dport 80 --sport 1024:65535 -m state --state NEW --syn -j ACCEPT  # 1 1


-A INTERNET-INTERNET -j ULOG --ulog-prefix "F0D:INTERNET-INTERNET DROP"
-A INTERNET-INTERNET -j DROP

-A INTERNET-DMZ -j ULOG --ulog-prefix "F0D:INTERNET-DMZ DROP"
-A INTERNET-DMZ -j DROP

-A INTERNET-INTRANET -j ULOG --ulog-prefix "F0D:INTERNET-INTRANET DROP"
-A INTERNET-INTRANET -j DROP

-A DMZ-INTERNET -j ULOG --ulog-prefix "F0D:DMZ-INTERNET DROP"
-A DMZ-INTERNET -j DROP

-A DMZ-DMZ -j ULOG --ulog-prefix "F0D:DMZ-DMZ DROP"
-A DMZ-DMZ -j DROP

-A DMZ-INTRANET -j ULOG --ulog-prefix "F0D:DMZ-INTRANET DROP"
-A DMZ-INTRANET -j DROP

-A INTRANET-INTERNET -j ULOG --ulog-prefix "F0D:INTRANET-INTERNET DROP"
-A INTRANET-INTERNET -j DROP

-A INTRANET-DMZ -j ULOG --ulog-prefix "F0D:INTRANET-DMZ DROP"
-A INTRANET-DMZ -j DROP

-A INTRANET-INTRANET -j ULOG --ulog-prefix "F0D:INTRANET-INTRANET DROP"
-A INTRANET-INTRANET -j DROP

