guillaume.emorine/siotp
guillaume.emorine/siotp
2
1
Fork 1
Code Pull Requests Actions Packages Projects Releases 4 Activity

Modifié : sisr1/tp08/firewall_regles.txt

Browse Source
This commit is contained in:
guillaume.emorine 2024-04-11 14:53:35 +02:00
parent 397634652c
commit 0da0615e76
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sisr1/tp08/firewall_regles.txt
View File

@ -4,7 +4,7 @@
# Etape 3 - oui # Etape 3 - oui
# Etape 4 - oui # Etape 4 - oui
# Etape 5 - oui # Etape 5 - oui
# Etape 6 - non # Etape 6 - oui
# Etape 7 - non # Etape 7 - non
# Etape 8 - non # Etape 8 - non
@ -62,6 +62,8 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }
@ -120,6 +122,9 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }
chain system_out { chain system_out {
@ -173,4 +178,7 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }