diff --git a/gestion/gen_confs/firewall6.py b/gestion/gen_confs/firewall6.py index bf361203..272ae60c 100755 --- a/gestion/gen_confs/firewall6.py +++ b/gestion/gen_confs/firewall6.py @@ -25,7 +25,7 @@ import sys, re, os, pwd sys.path.append('/usr/scripts/gestion') from ldap_crans import hostname -from config import conf_fw, mid, prefix, role, file_pickle +from config import conf_fw, mid, prefix, role, file_pickle, open_ports from config import authorized_icmpv6 from ipt import * @@ -62,8 +62,9 @@ def ports(dev_ip6, dev_crans): # dev_ip6) # ip6tables.filter.forward('-i %s -p tcp --dport ssh -m state --state NEW \ #-j ACCEPT' % dev_ip6) - - + for proto in open_ports.keys(): + ip6tables.filter.forward('-i %s -p %s -m multiport --dports %s -j \ +ACCEPT' % (dev_ip6, proto, open_ports[proto])) for type_machine in ['fil', 'fil-v6', 'wifi', 'wifi-v6']: ip6tables.filter.forward('-i %s -d %s -j %s' % (dev_ip6, prefix[dprefix[type_machine]][0], 'EXT' + re.sub('-', '',