diff --git a/gestion/gen_confs/firewall_komaz.py b/gestion/gen_confs/firewall_komaz.py index 8fde39f7..b90f41a8 100755 --- a/gestion/gen_confs/firewall_komaz.py +++ b/gestion/gen_confs/firewall_komaz.py @@ -225,12 +225,16 @@ class firewall_komaz(firewall_crans) : def admin_vlan(self) : """ Reconstruit la chaine ADMIN_VLAN """ iptables("-F ADMIN_VLAN") - self.anim = anim(' Chaîne ADMIN_VLAN') + nounou_machines = [] for adherent in crans_ldap().search('droits=Nounou')['adherent'] : for machine in adherent.machines() : - self.anim.cycle() - iptables("-A ADMIN_VLAN -p tcp -s %s --dport ssh -j ACCEPT" % machine.ip() ) + nounou_machines.append(machine.ip()) + iptables("-A ADMIN_VLAN -j REJECT") + self.anim = anim(' Chaîne ADMIN_VLAN', len(nounou_machines)) + for machine in nounou_machines : + self.anim.cycle() + iptables("-I ADMIN_VLAN -p tcp -s %s --dport ssh -j ACCEPT" % machine) self.anim.reinit() print OK