public (active) target: default icmp-block-inversion: no interfaces: enp0s3 enp0s8 sources: services: ftp http https ssh ports: 11000-11009/tcp protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: