Inside of the firewall the only permit destination for traffic from the interior or exterior route is the bastion host.

• 在防火墙内部，对于来自内外部路由器的通信量来说，唯一允许到达的目的地是bastion主机。