diff --git a/gestion/gen_confs/firewall_komaz.py b/gestion/gen_confs/firewall_komaz.py index e08e1c82..91a21b77 100755 --- a/gestion/gen_confs/firewall_komaz.py +++ b/gestion/gen_confs/firewall_komaz.py @@ -83,6 +83,7 @@ class firewall_komaz : REJECT pour le reste """ zone_serveur="138.231.136.0/28" + vlan_adm="138.231.144.0/28" eth_ext = "eth2" eth_int = "eth0" # Ports ouverts @@ -236,6 +237,7 @@ class firewall_komaz : iptables("-A FORWARD -i lo -j ACCEPT") iptables("-A FORWARD -p icmp -j ACCEPT") + iptables("-A FORWARD -i %s -d %s -j REJECT" % (self.eth_ext, self.vlan_adm)) iptables("-A FORWARD -i %s -j BLACKLIST_DST" % self.eth_ext ) iptables("-A FORWARD -o %s -j BLACKLIST_SRC" % self.eth_ext ) iptables("-A FORWARD -s ! %s -d ! %s -j FILTRE_P2P" % (self.zone_serveur, self.zone_serveur) )