Modifié : sisr1/tp08/firewall_regles.txt
This commit is contained in:
parent
a81c373e20
commit
818cdead86
@ -195,15 +195,21 @@ table ip ipfilter {
|
||||
|
||||
}
|
||||
|
||||
# Chaînes pour la NAT - étape 8.
|
||||
# Chaînes pour la NAT - étape 8 et 9.
|
||||
|
||||
chain nat_prerouting {
|
||||
type nat hook prerouting priority filter; policy accept;
|
||||
type nat hook prerouting priority filter; policy accept;*
|
||||
|
||||
# Port Forwarding pour le DNS, entre pare-feu et DMZ (étape 9)
|
||||
iif eth0 udp dport 53 dnat to $proxy-dns
|
||||
iif eth0 tcp dport 53 dnat to $proxy-dns
|
||||
|
||||
}
|
||||
|
||||
chain nat_postrouting {
|
||||
type nat hook postrouting priority filter; policy accept;
|
||||
|
||||
# Masquage des adresses IP de la DMZ via NAT (étape 8)
|
||||
ip saddr $dmz-ntw snat $firewall-net
|
||||
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user