nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Modifié : sisr1/tp08/firewall_regles.txt

Browse Source
This commit is contained in:
guillaume.emorine
2024-04-11 14:53:35 +02:00
parent 397634652c
commit 0da0615e76
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
sisr1/tp08/firewall_regles.txt
View File

@@ -4,7 +4,7 @@
# Etape 3 - oui # Etape 3 - oui
# Etape 4 - oui # Etape 4 - oui
# Etape 5 - oui # Etape 5 - oui
# Etape 6 - non # Etape 6 - oui
# Etape 7 - non # Etape 7 - non
# Etape 8 - non # Etape 8 - non
@@ -62,7 +62,9 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }
chain system_in { chain system_in {
@@ -120,6 +122,9 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }
chain system_out { chain system_out {
@@ -173,4 +178,7 @@ table ip ipfilter{
udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp dport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept udp sport 53 ip daddr $lan-ntw ip saddr $proxy-dns accept
#Autorise les requêtes DNS depuis la DMZ vers sio.lan (gwsio) (étape 6)
tcp dport 53 ip saddr $proxy-dns ip daddr $router accept
} }