diff --git a/gestion/gen_confs/firewall.py b/gestion/gen_confs/firewall.py index 86b98595..029770f6 100644 --- a/gestion/gen_confs/firewall.py +++ b/gestion/gen_confs/firewall.py @@ -1117,6 +1117,7 @@ class firewall_zamok(firewall_crans) : def blacklist(self): """Fondamentalement, bloque l'accès internet sur zamok aux adhérents sanctionnés""" + iptables("-F OUTPUT") self.filter_table() blacklist_sanctions = ('upload', 'warez', 'p2p', 'autodisc_p2p', 'autodisc_upload', 'bloq') @@ -1131,6 +1132,7 @@ class firewall_zamok(firewall_crans) : if s in sanctions: try: uid = adh.uidNumber() + iptables("-A OUTPUT -m owner --uid-owner %s -d 127.0.0.1/8 -j ACCEPT" % uid) iptables("-A OUTPUT -m owner --uid-owner %s -d 138.231.136.1/21 -j ACCEPT" % uid) iptables("-A OUTPUT -m owner --uid-owner %s -d 138.231.144.1/21 -j ACCEPT" % uid) iptables("-A OUTPUT -m owner --uid-owner %s -j REJECT" % uid)