| 104,7 → 104,7 |
|---|
| # Redirection des flux DNS vers le port 54 (dns+blackhole) sauf pour les IP en exceptions |
| if [ $DNS_FILTERING = on ]; then |
| # Compute exception IP |
| nb_exceptions=`wc -w /usr/local/etc/alcasar-filter-exceptions | cut -d" " -f1` |
| nb_exceptions=`wc -l /usr/local/etc/alcasar-filter-exceptions | cut -d" " -f1` |
| if [ $nb_exceptions != "0" ] |
| then |
| while read ip_exception |
| 117,10 → 117,9 |
|---|
| ##################################### |
| # If protocols filter is activate # |
| ##################################### |
| # filtrage de protocoles sauf pour les IP en exceptions |
| if [ $PROTOCOLS_FILTERING = on ]; then |
| # Compute exception IP |
| nb_exceptions=`wc -w /usr/local/etc/alcasar-filter-exceptions | cut -d" " -f1` |
| # Compute exception IP (IP addresses that shouldn't be filtered) |
| nb_exceptions=`wc -l /usr/local/etc/alcasar-filter-exceptions | cut -d" " -f1` |
| if [ $nb_exceptions != "0" ] |
| then |
| while read ip_exception |
| 129,6 → 128,17 |
|---|
| $IPTABLES -A FORWARD -i $TUNIF -s $ip_exception -m state --state NEW -j ACCEPT |
| done < /usr/local/etc/alcasar-filter-exceptions |
| fi |
| # Compute uamallowed IP (IP address of equipments connect between ALCASAR and Internet (DMZ, own servers, ...) |
| nb_exceptions=`wc -l /usr/local/etc/alcasar-uamallowed | cut -d" " -f1` |
| if [ $nb_exceptions != "0" ] |
| then |
| while read ip_allowed_line |
| do |
| ip_allowed=`echo $ip_allowed_line|cut -d"\"" -f2` |
| $IPTABLES -A FORWARD -i $TUNIF -d $ip_allowed -m state --state NEW -j ULOG --ulog-prefix "RULE IP-allowed -- ACCEPT " |
| $IPTABLES -A FORWARD -i $TUNIF -d $ip_allowed -m state --state NEW -j ACCEPT |
| done < /usr/local/etc/alcasar-uamallowed |
| fi |
| # Autorisation des protocoles non commentés |
| # Allow non comment protocols |
| while read svc_line |