Subversion Repositories ALCASAR

Rev

Go to most recent revision | Hide changed files | Details | Compare with Previous | Blame

Filtering Options

Rev Age Author Path Log message Diff Changes
1377 3607 d 4 h richard /repos/alcasar/trunk/ Ajout filtre radius WL/BL  
/web/acc/manager/htdocs/help/filtering_help.html
/conf/radius/user_edit.attrs
/scripts/alcasar-conf.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-watchdog.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-bypass.sh
/scripts/sbin/alcasar-havp.sh
/scripts/sbin/alcasar-url_filter.sh
/web/acc/admin/bl_categories_help.php
/web/acc/admin/bl_filter.php
/web/acc/admin/bl_filter2.php
/web/acc/admin/net_filter.php
/web/acc/filtering.php
/web/acc/manager/htdocs/group_new.php
/web/acc/manager/htdocs/user_edit.php
/web/acc/manager/htdocs/user_new.php
/web/acc/manager/htdocs/user_new2.php
/web/acc/manager/lib/langues.php
/web/acc/manager/lib/sql/create_group.php
/web/acc/manager/lib/sql/create_user.php
/web/acc/menu.php
/web/js/fonctions.js
1339 3643 d 14 h richard /repos/alcasar/trunk/ ------ Modif from JB COUPRIT -------------
- Au démarrage, on restore les ipset plutôt que de relancer "alcasar-iptables.sh"
- On scinde les ipsets en un seul (catégories BL + fichier d'IP + IP entrées manuellement - IP réhabilitées)
- sauvegarde des IPSET + fichiers d'IP
- interface de gestion BL revu et simplifiée
- création des IPSET de chaque catégorie à l'import de la BL
 
/conf/nfsen/nfsen.service
/scripts/alcasar-iptables.sh
/scripts/sbin/alcasar-bl.sh
/web/acc/admin/bl_filter.php
/web/acc/admin/bl_filter2.php
/web/acc/admin/net_filter.php
1294 3756 d 4 h richard /repos/alcasar/trunk/ Première exploitation des SET 'ipset'
- avec le blockage IP (ça marche bien)
- avec la redirection https (ça ne marche pas encore)
 
/scripts/alcasar-condown.sh
/alcasar.sh
/conf/sudoers
/scripts/alcasar-conup.sh
/scripts/alcasar-iptables.sh
/web/acc/admin/net_filter.php
934 4312 d 11 h franck /repos/alcasar/trunk/web/acc/ Quelques corrections mineures supplémentaires sur les coquilles  
/web/acc/admin/auth_exceptions.php
/web/acc/admin/dns_filter.php
/web/acc/admin/net_filter.php
/web/acc/admin/network.php
/web/acc/manager/htdocs/import_user.php
879 4344 d 6 h richard /repos/alcasar/trunk/ intégration du filtrage de bing et Youtube (to be continued)  
/scripts/sbin/alcasar-urlfilter.sh
/scripts/sbin/alcasar-dg-pureip.sh
/scripts/sbin/alcasar-dg-safesearch.sh
/scripts/alcasar-conf.sh
/scripts/sbin/alcasar-safesearch.sh
/web/acc/admin/dns_filter.php
/web/acc/admin/dns_filter2.php
/web/acc/admin/net_filter.php
870 4370 d 5 h richard /repos/alcasar/trunk/ - ACC : les noms de domaines en exception peuvent être déclaré "affiché" dans la page d'interception
- ajout d'un exemple de PAT dans l'iptables-local
 
/CHANGELOG
/conf/etc/alcasar-iptables-local.sh
/scripts/alcasar-file-clean.sh
/web/acc/admin/auth_exceptions.php
/web/acc/admin/net_filter.php
861 4387 d 6 h richard /repos/alcasar/trunk/ - Possibilité de configurer le service DHCP (off | half | full)
- to bo finished soon
 
/CHANGELOG
/alcasar.sh
/scripts/alcasar-conf.sh
/scripts/sbin/alcasar-dhcp.sh
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/web/acc/admin/network.php
/web/acc/admin/network2.php
860 4388 d 9 h richard /repos/alcasar/trunk/ - Fin d'intégration du bloquage d'@IP de station ou de réseau. Il reste à tester ...  
/CHANGELOG
/alcasar.sh
/scripts/alcasar-conf.sh
/web/acc/admin/net_filter.php
859 4389 d 4 h richard /repos/alcasar/trunk/ - traitement du blocage IP
- intégration du traitement du LAN "alcasar-box" dans ce traitement (simplification)
- to be finished soon
 
/scripts/alcasar-file-clean.sh
/conf/etc/alcasar-iptables-block
/conf/sudoers
/scripts/alcasar-iptables.sh
/scripts/sbin/alcasar-nf.sh
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/web/acc/admin/network.php
791 4486 d 5 h richard /repos/alcasar/trunk/ - Finalisation du filtre d'accès au LAN situé entre ALCASAR et la box
- mise en forme du changelog en vue de sa publication (à côté du tarball)
 
/CHANGELOG
/scripts/alcasar-iptables.sh
/scripts/sbin/alcasar-nf.sh
/web/acc/admin/net_filter.php
790 4487 d 3 h richard /repos/alcasar/trunk/ - suppression des modules apache inutilisée
- ajout du suivi de session ftp (conntrack en output)
- suppression de l'accès direct à la structure WEB (via /Save) --> à transférer dans l'interface graphique
- interdiction d'accès au LAN ETH0 (phase 1)
- tri de la liste des fichiers à analyser par firewalleyes (tracability en 1)
- prise en compte préco ANSSI concernant les requêtes SQL
- suppression d'une info de la page de status
 
/CHANGELOG
/alcasar.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-watchdog.sh
/scripts/sbin/alcasar-logout.sh
/scripts/sbin/alcasar-uninstall.sh
/web/acc/admin/firewallEyes/configuration.php
/web/acc/admin/net_filter.php
/web/acc/manager/lib/sql/drivers/mysql/functions.php
/web/pass/sql/drivers/mysql/functions.php
/web/status.php
681 4662 d 5 h richard /repos/alcasar/trunk/ - correction bug remontés dans le forum  
/scripts/alcasar-conf.sh
/web/acc/admin/net_filter.php
612 4722 d 5 h richard /repos/alcasar/trunk/ - Creation d'un fichier central de conf (/usr/local/etc/alcasar.conf)
- Mise à jour des scripts pour prendre en compte ce fichier
- Quand sshd est activé, il écoute des deux côtés (LAN & WAN)
 
/CHANGELOG
/alcasar.sh
/conf/sudoers
/scripts/alcasar-conf.sh
/scripts/alcasar-iptables.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-havp.sh
/scripts/sbin/alcasar-nf.sh
/web/acc/admin/dns_filter.php
/web/acc/admin/net_filter.php
/web/acc/admin/network.php
520 4778 d 6 h richard /repos/alcasar/trunk/ - Finalisation de l'exception au filtrage
- mise à jour des doc
 
/web/acc/alcasar-2.1-exploitation.pdf
/web/acc/alcasar-2.1-installation.pdf
/web/acc/alcasar-2.1-presentation.pdf
/web/acc/alcasar-2.0-exploitation.pdf
/web/acc/alcasar-2.0-installation.pdf
/web/acc/alcasar-2.0-presentation.pdf
/alcasar.sh
/readme-2.0.txt
/scripts/alcasar-conf.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-watchdog.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-nf.sh
/web/acc/admin/auth_exceptions.php
/web/acc/admin/filter_exceptions.php
/web/acc/admin/net_filter.php
/web/acc/menu.php
504 4792 d 5 h richard /repos/alcasar/trunk/ - finalisation de interface "exception à l'authentification"
- finalisation interface "exception au filtrage"
- simplification interface d'interception
 
/web/acc/admin/filter_exceptions.php
/alcasar.sh
/scripts/alcasar-conf.sh
/web/acc/admin/auth_exceptions.php
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/web/acc/filtering.php
/web/intercept.php
372 4877 d 8 h richard /repos/alcasar/trunk/web/acc/ - Amélioration de la fonction filtrage de protocoles
- suppression de l'exception sur le filtrage d'url et domaine (on verra + tard)
 
/web/acc/alcasar-2.0-exploitation.pdf
/web/acc/alcasar-2.0-installation.pdf
/web/acc/alcasar-2.0-presentation.pdf
/web/acc/admin/filter_exceptions.php
/web/acc/alcasar-1.9-exploitation.pdf
/web/acc/alcasar-1.9-installation.pdf
/web/acc/alcasar-1.9-presentation.pdf
/web/acc/menu.php
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/web/acc/filtering.php
364 4879 d 16 h franck /repos/alcasar/trunk/ Quelques corrections accent et base de donnees vierge dans script d'install (car probleme packaging x86_64 de freeradius-web)  
/alcasar.sh
/web/acc/admin/net_filter.php
/web/index.php
318 4911 d 4 h richard /repos/alcasar/trunk/web/  
/web
/web/.directory
/web/acc
/web/acc/.directory
/web/acc/about.htm
/web/acc/admin
/web/acc/admin/.directory
/web/acc/admin/activity.php
/web/acc/admin/auth_exceptions.php
/web/acc/admin/bl_categories_help.php
/web/acc/admin/dns_filter.php
/web/acc/admin/dns_filter2.php
/web/acc/admin/filter_exceptions.php
/web/acc/admin/firewallEyes
/web/acc/admin/firewallEyes/.directory
/web/acc/admin/firewallEyes/configuration.php
/web/acc/admin/firewallEyes/gpl.txt
/web/acc/admin/firewallEyes/header.php
/web/acc/admin/firewallEyes/images
/web/acc/admin/firewallEyes/images/.directory
/web/acc/admin/firewallEyes/images/buttonBkg.jpg
/web/acc/admin/firewallEyes/images/commandHeaderBkg.jpg
/web/acc/admin/firewallEyes/images/destination.gif
/web/acc/admin/firewallEyes/images/dst-port.gif
/web/acc/admin/firewallEyes/images/firewallEyes.jpg
/web/acc/admin/firewallEyes/images/header-background.jpg
/web/acc/admin/firewallEyes/images/info.gif
/web/acc/admin/firewallEyes/images/logo-firewallEyes.gif
/web/acc/admin/firewallEyes/images/port-dst.gif
/web/acc/admin/firewallEyes/images/port-src.gif
/web/acc/admin/firewallEyes/images/source.gif
/web/acc/admin/firewallEyes/images/src-port.gif
/web/acc/admin/firewallEyes/include.php
/web/acc/admin/firewallEyes/index.html
/web/acc/admin/firewallEyes/info.php
/web/acc/admin/firewallEyes/log.css
/web/acc/admin/firewallEyes/logs.php
/web/acc/admin/firewallEyes/messages
/web/acc/admin/firewallEyes/readme.txt
/web/acc/admin/ldap.php
/web/acc/admin/logo.php
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/web/acc/admin/network.php
/web/acc/admin/update_ldap.php
/web/acc/alcasar-1.9-exploitation.pdf
/web/acc/alcasar-1.9-installation.pdf
/web/acc/alcasar-1.9-presentation.pdf
/web/acc/auth.php
/web/acc/bas.htm
/web/acc/haut.php
/web/acc/menu.php
/web/acc/phpsysinfo
/web/acc/stat.php
/web/alcasar-certificat.pdf
/web/css
/web/css/.directory
/web/css/ldap.css
/web/css/style.css
/web/favicon.ico
/web/images
/web/index-access-deny.php
/web/index-network-pb.php
/web/intercept.php