[firewall.py] Obsolète

darcs-hash:20091017235134-ffbb2-aab8ece202c7f7a4dd060833e50569b88a9c99f5.gz
This commit is contained in:
Nicolas Dandrimont 2009-10-18 01:51:34 +02:00
parent 90b0e0c4e1
commit b47319a4bb

View file

@ -643,7 +643,6 @@ class firewall_komaz(firewall_crans) :
iptables("-t nat -A PREROUTING -s ! %s -j TEST_VIRUS_FLOOD" % self.zone_serveur)
iptables("-t nat -A PREROUTING -j RESEAUX_NON_ROUTABLES_DST")
iptables("-t nat -A PREROUTING -i %s -j RESEAUX_NON_ROUTABLES_SRC" % self.eth_ext )
iptables("-t nat -A PREROUTING -i %s -p udp --destination 138.231.136.1 --destination-port 53 -j DNAT --to-destination 138.231.136.3" % self.eth_ext)
iptables("-t nat -A PREROUTING -p tcp -d 138.231.136.2 --dport 22 -j DNAT --to-destination 138.231.136.1:22") # redirection du ssh vers zamok
iptables("-t nat -A PREROUTING -p tcp -d 138.231.136.2 --dport 443 -j DNAT --to-destination 138.231.136.1:22") # redirection du ssh vers zamok (pour passer dans un proxy, avec corkscrew)
iptables("-t nat -A PREROUTING -i %s -j ACCEPT" % self.eth_ext )