1
edit
Changes
→Building a Simple Firewall on VM1
#Create a new chain named MYSSH in the filter table.
#Add a rule to the INPUT chain of your filter table that sends all tcp packets with destination port 22 to your MYSSH chain.
#Add a rule to your MYSSH chain to deny all traffic from 192.168.122X.1 (i.e. your Fedora host). Also log these denied packets with log level 'info' and log prefix "DENIED BY MYSSH".
#Add a rule to the INPUT chain of the filter table that allows all new tcp ssh connections.
#Make a new chain named MYICMP in the filter table.
#Add a rule to your MYICMP chain that denies ICMP pings from 192.168.122X.1 (your Fedora host).
#Add a rule to your MYICMP chain that denies ICMP pings originating with MAC address of Fedora host's virbr0.
#Add a rule to your MYICMP chain that allows ICMP pings from anywhere.