crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Mails] Bye bye rouge

Browse source 
Ignore-this: 41f78b2bd4df9b4411c032a4169574be

darcs-hash:20120802160424-ab199-b3db7d18ed58b1e64d8dba4ee919e6870f4457a8.gz
This commit is contained in:
becue 2012-08-02 18:04:24 +02:00
parent 7fcc468cab
commit b7e9acf9f1
13 changed files with 40 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

10
gestion/gen_confs/firewall_new.py
View file

@ -1275,7 +1275,7 @@ class firewall_zamok(firewall_crans) :
Rouge
"""
class firewall_rouge(firewall_crans) :
class firewall_redisdead(firewall_crans) :
"""
Structure du firewall :
table filter :
@ -1288,7 +1288,7 @@ class firewall_rouge(firewall_crans) :
# interfaces physiques
eth_pub = "eth0"
eth_adm = "eth0.2"
eth_adm = "eth1"
def filter_table(self) :
self.anim = anim('\tStructure de la table filter')
@ -1302,7 +1302,7 @@ class firewall_rouge(firewall_crans) :
print OK
def filter_table_tweaks(self) :
self.anim = anim('\tRègles spécifiques à rouge')
self.anim = anim('\tRègles spécifiques à redisdead')
iptables("-P INPUT ACCEPT")
iptables("-P FORWARD DROP")
print OK
@ -1348,7 +1348,7 @@ class firewall_vert(firewall_crans) :
iptables("-P FORWARD DROP")
print OK
class firewall_sable(firewall_rouge):
class firewall_sable(firewall_redisdead):
"""Comme pour rouge, avec le proxy transparent en plus"""
def mangle_table(self):
@ -1363,7 +1363,7 @@ class firewall_sable(firewall_rouge):
def nat_table(self):
firewall_rouge.nat_table(self)
firewall_redisdead.nat_table(self)
# Proxy transparent pour le filiaire
iptables("-t nat -I PREROUTING -i eth0.2 -m mark --mark %s -j ACCEPT" % conf_fw.mark['proxy'])