diff --git a/gestion/gen_confs/firewall.py b/gestion/gen_confs/firewall.py index a517d898..dab3b58a 100755 --- a/gestion/gen_confs/firewall.py +++ b/gestion/gen_confs/firewall.py @@ -1173,6 +1173,10 @@ class firewall_sable(firewall_rouge): iptables("-t nat -i %s -A PREROUTING -p tcp --destination-port 3128 -j ACCEPT" % interface) iptables("-t nat -i %s -A PREROUTING -p tcp --destination-port 443 -j ACCEPT" % interface) + iptables("-i %s -A FORWARD -p tcp --destination-port 443 -j ACCEPT" % if_radin) + iptables("-o %s -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT" % if_radin) + iptables("-t nat -o %s -A POSTROUTING -p tcp --destination-port 443 -j MASQUERADE" % if_radin) + # Limite de débit sur le vlan radin tc("qdisc del dev %s root" % if_radin) tc("qdisc add dev %s root htb" % if_radin)