Un restart du nfs sur vert ne plante plus bleu.
darcs-hash:20050710211749-41617-aab28fbf145fdc8c54f07d0351778ece83b9de5a.gz
This commit is contained in:
parent
d5268575ef
commit
daeded7466
1 changed files with 8 additions and 1 deletions
|
@ -748,8 +748,15 @@ class firewall_bleu(firewall_crans) :
|
||||||
except KeyError:
|
except KeyError:
|
||||||
continue
|
continue
|
||||||
|
|
||||||
|
# LDAP toujour joignable
|
||||||
iptables("-A SERV_OUT_ADM -p tcp --dport ldap -j ACCEPT")
|
iptables("-A SERV_OUT_ADM -p tcp --dport ldap -j ACCEPT")
|
||||||
iptables("-A SERV_OUT_ADM -j DROP")
|
|
||||||
|
# Pour le nfs (le paquet à laisser passer n'a pas d'owner)
|
||||||
|
iptables("-A SERV_OUT_ADM -p tcp -d vert.adm.crans.org -m owner ! --uid-owner 0 -j REJECT --reject-with icmp-net-prohibited")
|
||||||
|
iptables("-A SERV_OUT_ADM -p tcp -d vert.adm.crans.org -j ACCEPT")
|
||||||
|
|
||||||
|
# Rien d'autre ne passe
|
||||||
|
iptables("-A SERV_OUT_ADM -j REJECT --reject-with icmp-net-prohibited")
|
||||||
|
|
||||||
self.anim.reinit()
|
self.anim.reinit()
|
||||||
print OK
|
print OK
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue