diff --git a/gestion/gen_confs/firewall6.py b/gestion/gen_confs/firewall6.py index cdb6b652..b5c0c300 100755 --- a/gestion/gen_confs/firewall6.py +++ b/gestion/gen_confs/firewall6.py @@ -73,10 +73,9 @@ ACCEPT' % (dev_ip6, proto, open_ports[proto])) REJECT --reject-with icmp6-port-unreachable') # Port ouvert CRANS->EXT - ip6tables.filter.forward('-i %s -p udp -m multiport --dports \ -0:136,140:65535 -j ACCEPT' % dev_crans) - ip6tables.filter.forward('-i %s -p tcp -m multiport --dports \ -0:24,26:79,81:134,136,140:444,446:65535 -j ACCEPT' % dev_crans) + ip6tables.filter.forward('-i %s -p udp -m multiport --dports 0:136,140:65535 -j ACCEPT' % dev_crans) + # FIXME: proxy transparent -> port 80 + ip6tables.filter.forward('-i %s -p tcp -m multiport --dports 0:24,26:79,80,81:134,136,140:444,446:65535 -j ACCEPT' % dev_crans) for type_machine in ['fil', 'fil-v6', 'wifi', 'wifi-v6']: ip6tables.filter.forward('-i %s -s %s -j %s' % (dev_crans,