On vire la limite

darcs-hash:20050818190047-d1718-6699490c8fae9f984789ca38e4fd6ffd0409dd6a.gz
This commit is contained in:
bernat 2005-08-18 21:00:47 +02:00
parent 120e856e58
commit a16e8a71e8

View file

@ -465,7 +465,7 @@ class firewall_komaz(firewall_crans) :
iptables("-t nat -A PREROUTING -i %s -j ACCEPT" % self.eth_ext )
iptables("-t nat -A PREROUTING -s %s -j ACCEPT" % self.zone_serveur )
iptables("-t nat -A PREROUTING -d %s -j ACCEPT" % self.zone_serveur )
iptables("-t nat -A PREROUTING -i %s -p tcp --dport 80 -s ! %s -m limit --limit 50/minute -j DNAT --to-destination 138.231.136.3:80" % (self.eth_int, self.zone_serveur) )
iptables("-t nat -A PREROUTING -i %s -p tcp --dport 80 -s ! %s -j DNAT --to-destination 138.231.136.3:80" % (self.eth_int, self.zone_serveur) )
iptables("-t nat -A POSTROUTING -o %s -p tcp --dport 80 -s 138.231.136.0/21 -d 138.231.136.3 -j SNAT --to-source 138.231.136.4" % self.eth_int )
iptables("-t nat -A PREROUTING -j TEST_MAC-IP")
iptables("-t nat -P PREROUTING DROP")