66 lines
2.7 KiB
Python
66 lines
2.7 KiB
Python
# -*- python -*-
|
|
# -*- coding: iso-8859-15 -*-
|
|
## Définition du comportement du firewall.
|
|
|
|
## Liste des serveurs ayant des règles spéciales sur komaz
|
|
serveurs_list = ['ZAMOK',
|
|
'SILA',
|
|
'EGON',
|
|
'NS1']
|
|
ZAMOK={'ip':'138.231.136.6','mac':'00:0e:0c:36:1d:16'}
|
|
SILA= {'ip':'138.231.136.10','mac':'00:c0:9f:1d:0d:a1'}
|
|
EGON= {'ip':'138.231.136.7','mac':'00:80:c8:c9:ab:01' }
|
|
NS1= {'ip':'138.231.136.8','mac':'00:0e:0c:36:1d:16'}
|
|
|
|
limite_connexion='100'
|
|
logburst='2'
|
|
loglimit='1/s'
|
|
loglevel='notice'
|
|
logprefix_macip='"Mauvaise MacIp:"\n'
|
|
logprefix_blacklist='"Adhérent blacklisté:"\n'
|
|
logprefix_adherents='"Tentative d''abus de droits"\n'
|
|
int_crans='eth0'
|
|
int_net='eth2'
|
|
## Liste des ports *ouverts* sur les serveurs listés précédement
|
|
serveurs_ports = {'ZAMOK' : {'portTCPin' : '22 25 53 80 119 443 993 5222'+\
|
|
' 5223 5269',
|
|
'portTCPout': ':',
|
|
'portUDPin' : '53 514 33434',
|
|
'portUDPout': ':'},
|
|
'SILA' : {'portTCPin' : '20 21 22 53 80 110 143',
|
|
'portTCPout': ':',
|
|
'portUDPin' : '53 33434',
|
|
'portUDPout': ':'},
|
|
'EGON' : {'portTCPin' : '22 80 443',
|
|
'portTCPout': ':',
|
|
'portUDPin' : '53',
|
|
'portUDPout': ':'},
|
|
'NS1' : {'portTCPin' : '53',
|
|
'portTCPout': ':',
|
|
'portUDPin' : '53 33434',
|
|
'portUDPout': ':'},
|
|
}
|
|
|
|
komaz_ports={'portTCPin' : '22 4949',
|
|
'portTCPout': '22',
|
|
'portUDPin' : '53',
|
|
'portUDPout': '53'}
|
|
|
|
reseaux_non_routables=['1.0.0.0/8','2.0.0.0/8','5.0.0.0/8','7.0.0.0/8',\
|
|
'10.0.0.0/8','14.0.0.0/8','23.0.0.0/8','27.0.0.0/8','31.0.0.0/8','36.0.0.0/8',\
|
|
'37.0.0.0/8','39.0.0.0/8','41.0.0.0/8','42.0.0.0/8','71.0.0.0/8','72.0.0.0/8',\
|
|
'73.0.0.0/8','74.0.0.0/8','75.0.0.0/8','76.0.0.0/8','77.0.0.0/8','78.0.0.0/8',\
|
|
'79.0.0.0/8','89.0.0.0/8','90.0.0.0/8','91.0.0.0/8','92.0.0.0/8','93.0.0.0/8',\
|
|
'94.0.0.0/8','95.0.0.0/8','96.0.0.0/8','97.0.0.0/8','98.0.0.0/8','99.0.0.0/8',\
|
|
'100.0.0.0/8','101.0.0.0/8','102.0.0.0/8','103.0.0.0/8','104.0.0.0/8',\
|
|
'105.0.0.0/8','106.0.0.0/8','107.0.0.0/8','108.0.0.0/8','109.0.0.0/8',\
|
|
'110.0.0.0/8','111.0.0.0/8','112.0.0.0/8','113.0.0.0/8','114.0.0.0/8',\
|
|
'115.0.0.0/8','116.0.0.0/8','117.0.0.0/8','118.0.0.0/8','119.0.0.0/8',\
|
|
'120.0.0.0/8','121.0.0.0/8','122.0.0.0/8','123.0.0.0/8','124.0.0.0/8',\
|
|
'125.0.0.0/8','126.0.0.0/8','127.0.0.0/8','169.254.0.0/16','172.16.0.0/12',\
|
|
'173.0.0.0/8','174.0.0.0/8','175.0.0.0/8','176.0.0.0/8','177.0.0.0/8',\
|
|
'178.0.0.0/8','179.0.0.0/8','180.0.0.0/8','181.0.0.0/8','182.0.0.0/8',\
|
|
'183.0.0.0/8','184.0.0.0/8','185.0.0.0/8','186.0.0.0/8','187.0.0.0/8',\
|
|
'189.0.0.0/8','190.0.0.0/8','192.168.0.0/16','197.0.0.0/8','223.0.0.0/8',\
|
|
'224.0.0.0/4','240.0.0.0/4']
|
|
|