Subversion Repositories ALCASAR

Compare Revisions

No changes between revisions

Ignore whitespace Rev 814 → Rev 815

/alcasar.sh
1599,7 → 1599,10
echo
echo " Hit 'Enter' to continue"
fi
read a
sleep 2
if [ "$mode" != "update" ]
read a
fi
clear
# Apply and save the firewall rules
sh $DIR_DEST_BIN/alcasar-iptables.sh
/CHANGELOG
30,6 → 30,7
- control eth0 config on startup (no dhcp)
- don't download the last BL version
- remove unused RPM before update the system
- Improve when update is performed via SSH
News
- allow/deny access to the LAN located between ALCASAR and the Internet gateway (box)
- presentation and installation doc in english
/scripts/alcasar-iptables.sh
216,6 → 216,9
$IPTABLES -A FORWARD -i $TUNIF -p icmp -d $public_ip_mask -j REJECT --reject-with icmp-port-unreachable
$IPTABLES -A FORWARD -i $TUNIF -p tcp -d $public_ip_mask -j REJECT --reject-with tcp-reset
fi
# Autorisation des retours de connexions légitimes
# Allow conntrack
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
 
# If protocols filter is activate
if [ $PROTOCOLS_FILTERING = on ]; then
267,9 → 270,6
$IPTABLES -A FORWARD -i $TUNIF -p udp -j REJECT --reject-with icmp-port-unreachable
$IPTABLES -A FORWARD -i $TUNIF -p icmp -j REJECT
fi
# Autorisation des retours de connexions légitimes
# Allow conntrack
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
 
# If QOS is activate #
if [ $QOS = on ] && [ -e /usr/local/etc/alcasar-iptables-qos.sh ]; then
/web/acc/Alcasar-2.5-presentation-en.pdf
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream
Property changes:
Deleted: svn:mime-type
-application/octet-stream
\ No newline at end of property
/web/acc/alcasar-2.5-presentation-en.pdf
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream
Property changes:
Added: svn:mime-type
+application/octet-stream
\ No newline at end of property
/web/acc/alcasar-2.5-exploitation.pdf
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream