diff --git a/gestion/gen_confs/firewall_new.py b/gestion/gen_confs/firewall_new.py index 175590bb..afa71ca7 100755 --- a/gestion/gen_confs/firewall_new.py +++ b/gestion/gen_confs/firewall_new.py @@ -1418,17 +1418,17 @@ class firewall_gordon(firewall_crans) : def nat_table(self) : self.anim = anim('\tStructure de la table nat') - iptables('-t nat -N TEST_MAC-IP') + iptables('-t filter -N TEST_MAC-IP') - iptables("-t nat -P PREROUTING ACCEPT") - iptables("-t nat -A PREROUTING -i lo -j ACCEPT") - iptables("-t nat -A PREROUTING -d 224.0.0.0/4 -j DROP") + iptables("-t filter -P FORWARD ACCEPT") + iptables("-t filter -A FORWARD -i lo -j ACCEPT") + iptables("-t filter -A FORWARD -d 224.0.0.0/4 -j DROP") for net in NETs['fil'] + NETs['adm'] + NETs['wifi'] : - iptables("-t nat -A PREROUTING -s %s -j TEST_MAC-IP" % net) + iptables("-t filter -A FORWARD -s %s -j TEST_MAC-IP" % net) - iptables("-t nat -P PREROUTING ACCEPT") - iptables("-t nat -P OUTPUT ACCEPT") + iptables("-t filter -P FORWARD ACCEPT") + iptables("-t filter -P OUTPUT ACCEPT") print OK def filter_table_tweaks(self) :