diff --git a/sisr1/tp04_scripts_admin/EOF b/sisr1/tp04_scripts_admin/EOF new file mode 100644 index 0000000..e69de29 diff --git a/sisr1/tp05-Installation_d_un_proxy/dnsfwd.service b/sisr1/tp05-Installation_d_un_proxy/dnsfwd.service new file mode 100644 index 0000000..f81a3d4 --- /dev/null +++ b/sisr1/tp05-Installation_d_un_proxy/dnsfwd.service @@ -0,0 +1,13 @@ +[Unit] + +Description=execute /root/dnsfwd.sh + +After=default.target + +[Service] + +ExecStart=bash /root/dnsfwd.sh + +[Install] + +WantedBy=default.target diff --git a/sisr1/tp05-Installation_d_un_proxy/dnsfwd.sh b/sisr1/tp05-Installation_d_un_proxy/dnsfwd.sh new file mode 100644 index 0000000..b7efcbc --- /dev/null +++ b/sisr1/tp05-Installation_d_un_proxy/dnsfwd.sh @@ -0,0 +1,11 @@ +!/bin/bash +echo "1" > /proc/sys/net/ipv4/ip_forward +nft add table dnsfwd +nft add chain dnsfwd prerouting {type nat hook prerouting priority 0 \; } +nft add chain dnsfwd postrouting {type nat hook postrouting priority 0 \; } +nft add rule dnsfwd postrouting tcp dport 53 masquerade +nft add rule dnsfwd postrouting udp dport 53 masquerade +nft add rule dnsfwd prerouting tcp dport 53 masquerade +nft add rule dnsfwd prerouting udp dport 53 masquerade +nft add rule dnsfwd prerouting ct state established,related accept +nft add rule dnsfwd postrouting ct state established,related accept