it-team/lmn-client
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Restrict outbound traffic in exam-mode

Browse source
This commit is contained in:
Raphael Dannecker 2025-12-10 15:40:21 +01:00
parent 806220fca1
commit a75934ca0b
3 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/lmn_exam/templates/no-way-out.xml.j2 Normal file
View file

@ -0,0 +1,10 @@
<policy target="REJECT">
{% for address in exam_destination_allowed_ipv4 %}
<rule family="ipv4">
<destination address="{{ address }}"/>
<accept/>
</rule>
{% endfor %}
<ingress-zone name="{{ item }}"/>
<egress-zone name="ANY"/>
</policy>