nathan.genret/firewall
1
0
Fork 0
forked from guillaume.emorine/siotp
Code Pull Requests Activity

Nouveau fichier : sisr1/tp07/files_firewall/current_ruleset.nft

Browse Source 
Nouveau fichier : sisr1/tp07/files_firewall/interfaces
	Nouveau fichier : sisr1/tp07/files_firewall/refresh_firewall.sh
	Nouveau fichier : sisr1/tp07/files_firewall/resolv.conf
	Nouveau fichier : sisr1/tp07/files_pclan/interfaces
	Nouveau fichier : sisr1/tp07/files_pclan/resolv.conf
	Nouveau fichier : sisr1/tp07/files_pcnet/interfaces
	Nouveau fichier : sisr1/tp07/files_pcnet/resolv.conf
	Nouveau fichier : sisr1/tp07/files_srvweb/interfaces
	Nouveau fichier : sisr1/tp07/files_srvweb/resolv.conf
This commit is contained in:
Guillaume Emorine 2024-04-02 17:02:18 +02:00
parent 96f458969d
commit c9148309de
10 changed files with 103 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sisr1/tp07/files_firewall/current_ruleset.nft Normal file
View File

@ -0,0 +1,13 @@
table ip ipfilter {
chain routing {
type filter hook forward priority filter; policy accept;
icmp type echo-request iif { "enp0s3", "enp0s8" } drop
icmp type { echo-reply, echo-request } accept
drop
}
chain system_in {
type filter hook input priority filter; policy accept;
icmp type echo-request iif { "enp0s3", "enp0s8" } drop
}
}

25
sisr1/tp07/files_firewall/interfaces Normal file
View File

@ -0,0 +1,25 @@
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet static
address 192.168.0.120
gateway 192.168.0.1
pre-up bash /root/scriptsnft/refresh_firewall.sh
# Second network interface : DMZ
allow-hotplug enp0s8
iface enp0s8 inet static
address 172.16.0.254/24
# Third network interface : LAN
allow-hotplug enp0s9
iface enp0s9 inet static
address 10.0.0.254/24

7
sisr1/tp07/files_firewall/refresh_firewall.sh Normal file
View File

@ -0,0 +1,7 @@
#!/bin/bash
# active le routage entre les interfaces réseau du firewall
echo "1" > /proc/sys/net/ipv4/ip_forward
#vide les règles actuelles du pare-feu
nft flush ruleset
#charge les règles du pare-feu présentes dans le fichier
nft -f /root/scriptsnft/current_ruleset.nft

4
sisr1/tp07/files_firewall/resolv.conf Normal file
View File

@ -0,0 +1,4 @@
domain sio.lan
search sio.lan
nameserver 10.121.38.7
nameserver 10.121.38.8

14
sisr1/tp07/files_pclan/interfaces Normal file
View File

@ -0,0 +1,14 @@
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet static
address 10.0.0.1/24
gateway 10.0.0.254

4
sisr1/tp07/files_pclan/resolv.conf Normal file
View File

@ -0,0 +1,4 @@
domain sio.lan
search sio.lan
nameserver 10.121.38.7
nameserver 10.121.38.8

14
sisr1/tp07/files_pcnet/interfaces Normal file
View File

@ -0,0 +1,14 @@
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet static
address 192.168.0.121
gateway 192.168.0.120

4
sisr1/tp07/files_pcnet/resolv.conf Normal file
View File

@ -0,0 +1,4 @@
domain sio.lan
search sio.lan
nameserver 10.121.38.7
nameserver 10.121.38.8

14
sisr1/tp07/files_srvweb/interfaces Normal file
View File

@ -0,0 +1,14 @@
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet static
address 172.16.0.1/24
gateway 172.16.0.254

4
sisr1/tp07/files_srvweb/resolv.conf Normal file
View File

@ -0,0 +1,4 @@
domain sio.lan
search sio.lan
nameserver 10.121.38.7
nameserver 10.121.38.8