ajout de l'imap (port 993)

darcs-hash:20071007190402-c992d-51ea0c57d5298ad471f34632a06aa541ae0e0bf2.gz
This commit is contained in:
bos 2007-10-07 21:04:02 +02:00
parent 32287fc510
commit 46cc9fa1fa

View file

@ -19,7 +19,7 @@ iptables -F
iptables -t nat -F
iptables -t mangle -F
# Le routage de paquets est autorisà ©si c'est bien ce que l'on veut
# Le routage de paquets est autorise si c'est bien ce que l'on veut
iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 80 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 138.231.136.3 -i eth0 -p tcp --sport 80 -m state --state RELATED,ESTABLISHED -j ACCEPT
@ -28,6 +28,10 @@ iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 443 --tcp-flags FIN,
iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 443 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 138.231.136.3 -i eth0 -p tcp --sport 443 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 993 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
iptables -A FORWARD -d 138.231.136.3 -i eth1 -p tcp --dport 993 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 138.231.136.3 -i eth0 -p tcp --sport 993 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -j REJECT
# On NATe le port 80 vers rouge
@ -38,5 +42,9 @@ iptables -t nat -A POSTROUTING -d 138.231.136.3 -j SNAT --to-source 138.231.136.
iptables -t nat -A PREROUTING -d 82.225.39.54 -p tcp --dport 443 -j DNAT --to-destination 138.231.136.3
iptables -t nat -A POSTROUTING -d 138.231.136.3 -j SNAT --to-source 138.231.136.9
# On NATe le port 993 vers rouge
iptables -t nat -A PREROUTING -d 82.225.39.54 -p tcp --dport 993 -j DNAT --to-destination 138.231.136.3
iptables -t nat -A POSTROUTING -d 138.231.136.3 -j SNAT --to-source 138.231.136.9
# On active le routage
echo 1 >> /proc/sys/net/ipv4/ip_forward