Typo dans firewall_crans et ajour du firewall de bleu

il n'y a que le filtre MAC-IP pour l'instant.

darcs-hash:20050517150120-f163d-2d74fc818a1b1113ffb0a5c97a5d0ff1469829a0.gz
This commit is contained in:
segaud 2005-05-17 17:01:20 +02:00
parent 4904c6c3d3
commit 3b387dc162
2 changed files with 119 additions and 1 deletions

View file

@ -128,7 +128,7 @@ class firewall_crans :
for chaine in [ 'TEST_MAC-IP', 'RESEAUX_NON_ROUTABLES_SRC', 'RESEAUX_NON_ROUTABLES_DST' ] :
iptables('-t nat -N %s' % chaine)
iptables("-t nat -P PREROUTING -j ACCEPT")
iptables("-t nat -P PREROUTING ACCEPT")
iptables("-t nat -A PREROUTING -i lo -j ACCEPT")
iptables("-t nat -A PREROUTING -d 224.0.0.0/4 -j DROP")
iptables("-t nat -A PREROUTING -j RESEAUX_NON_ROUTABLES_DST")