# -*- python -*- # -*- coding: iso-8859-15 -*- ## Définition du comportement du firewall. ## Liste des serveurs ayant des règles spéciales sur komaz serveurs_list = ['ZAMOK', 'SILA', 'EGON', 'NS1'] ZAMOK={'ip':'138.231.136.6','mac':'00:0e:0c:36:1d:16'} SILA= {'ip':'138.231.136.10','mac':'00:c0:9f:1d:0d:a1'} EGON= {'ip':'138.231.136.7','mac':'00:80:c8:c9:ab:01' } NS1= {'ip':'138.231.136.8','mac':'00:0e:0c:36:1d:16'} limite_connexion='100' logburst='2' loglimit='1/s' loglevel='notice' logprefix_macip='"Mauvaise MacIp:"\n' logprefix_blacklist='"Adhérent blacklisté:"\n' logprefix_adherents='"Tentative d\'abus de droits"\n' int_crans='eth0' int_net='eth2' ## Liste des ports *ouverts* sur les serveurs listés précédement serveurs_ports = {'ZAMOK' : {'portTCPin' : '22 25 53 80 119 443 993 5222'+\ ' 5223 5269', 'portTCPout': ':', 'portUDPin' : '53 514 33434', 'portUDPout': ':'}, 'SILA' : {'portTCPin' : '20 21 22 53 80 110 143', 'portTCPout': ':', 'portUDPin' : '53 33434', 'portUDPout': ':'}, 'EGON' : {'portTCPin' : '22 80 443', 'portTCPout': ':', 'portUDPin' : '53', 'portUDPout': ':'}, 'NS1' : {'portTCPin' : '53', 'portTCPout': ':', 'portUDPin' : '53 33434', 'portUDPout': ':'}, } komaz_ports={'portTCPin' : '22 4949', 'portTCPout': '22', 'portUDPin' : '53', 'portUDPout': '53'} reseaux_non_routables=['1.0.0.0/8','2.0.0.0/8','5.0.0.0/8','7.0.0.0/8',\ '10.0.0.0/8','14.0.0.0/8','23.0.0.0/8','27.0.0.0/8','31.0.0.0/8','36.0.0.0/8',\ '37.0.0.0/8','39.0.0.0/8','41.0.0.0/8','42.0.0.0/8','71.0.0.0/8','72.0.0.0/8',\ '73.0.0.0/8','74.0.0.0/8','75.0.0.0/8','76.0.0.0/8','77.0.0.0/8','78.0.0.0/8',\ '79.0.0.0/8','89.0.0.0/8','90.0.0.0/8','91.0.0.0/8','92.0.0.0/8','93.0.0.0/8',\ '94.0.0.0/8','95.0.0.0/8','96.0.0.0/8','97.0.0.0/8','98.0.0.0/8','99.0.0.0/8',\ '100.0.0.0/8','101.0.0.0/8','102.0.0.0/8','103.0.0.0/8','104.0.0.0/8',\ '105.0.0.0/8','106.0.0.0/8','107.0.0.0/8','108.0.0.0/8','109.0.0.0/8',\ '110.0.0.0/8','111.0.0.0/8','112.0.0.0/8','113.0.0.0/8','114.0.0.0/8',\ '115.0.0.0/8','116.0.0.0/8','117.0.0.0/8','118.0.0.0/8','119.0.0.0/8',\ '120.0.0.0/8','121.0.0.0/8','122.0.0.0/8','123.0.0.0/8','124.0.0.0/8',\ '125.0.0.0/8','126.0.0.0/8','127.0.0.0/8','169.254.0.0/16','172.16.0.0/12',\ '173.0.0.0/8','174.0.0.0/8','175.0.0.0/8','176.0.0.0/8','177.0.0.0/8',\ '178.0.0.0/8','179.0.0.0/8','180.0.0.0/8','181.0.0.0/8','182.0.0.0/8',\ '183.0.0.0/8','184.0.0.0/8','185.0.0.0/8','186.0.0.0/8','187.0.0.0/8',\ '189.0.0.0/8','190.0.0.0/8','192.168.0.0/16','197.0.0.0/8','223.0.0.0/8',\ '224.0.0.0/4','240.0.0.0/4']