crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[firewall4] Proxy ARP pour soyouz

Browse source
This commit is contained in:
Valentin Samir 2014-03-03 11:17:51 +01:00
parent e84817213b
commit 987c56a082
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
gestion/gen_confs/firewall4/base.py
View file

@ -24,7 +24,7 @@ class firewall(utils.firewall_tools) :
def __init__(self): def __init__(self):
super(firewall, self).__init__() super(firewall, self).__init__()
self.reloadable = { self.reloadable = {
'blacklist_hard' : self.blacklist_hard, 'blacklist_hard' : self.blacklist_hard,
'test_mac_ip' : self.test_mac_ip, 'test_mac_ip' : self.test_mac_ip,
@ -175,6 +175,11 @@ class firewall(utils.firewall_tools) :
self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_ovh, config.mac_komaz)) self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_ovh, config.mac_komaz))
self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_ovh, config.mac_titanic)) self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_ovh, config.mac_titanic))
# Proxy ARP de Komaz et Titanic pour OVH
ip_soyouz = self.conn.search(u"host=soyouz.adm.crans.org")[0]['ipHostNumber'][0]
self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_soyouz, config.mac_komaz))
self.add(table, chain, '-m mac -s %s --mac-source %s -j RETURN' % (ip_soyouz, config.mac_titanic))
self.add(table, chain, '-j REJECT') self.add(table, chain, '-j REJECT')
print OK print OK