diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh index d41527a..aa0d4f4 100755 --- a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh @@ -36,10 +36,11 @@ sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT # NAT sur la carte exterieur (pouvoir curl une machine de l'autre coter) sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 10.0.0.0/16 +sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 172.16.0.0/16 #sudo iptables -L -t nat # pour controler sudo iptables -A FORWARD -j ACCEPT # Acces DNS sortante -sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT -sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT +sudo iptables -A FORWARD -p udp --dport 53 -j ACCEPT +sudo iptables -A FORWARD -p udp --sport 53 -j ACCEPT