/alcasar.sh |
---|
1599,7 → 1599,10 |
echo |
echo " Hit 'Enter' to continue" |
fi |
read a |
sleep 2 |
if [ "$mode" != "update" ] |
read a |
fi |
clear |
# Apply and save the firewall rules |
sh $DIR_DEST_BIN/alcasar-iptables.sh |
/CHANGELOG |
---|
30,6 → 30,7 |
- control eth0 config on startup (no dhcp) |
- don't download the last BL version |
- remove unused RPM before update the system |
- Improve when update is performed via SSH |
News |
- allow/deny access to the LAN located between ALCASAR and the Internet gateway (box) |
- presentation and installation doc in english |
/scripts/alcasar-iptables.sh |
---|
216,6 → 216,9 |
$IPTABLES -A FORWARD -i $TUNIF -p icmp -d $public_ip_mask -j REJECT --reject-with icmp-port-unreachable |
$IPTABLES -A FORWARD -i $TUNIF -p tcp -d $public_ip_mask -j REJECT --reject-with tcp-reset |
fi |
# Autorisation des retours de connexions légitimes |
# Allow conntrack |
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT |
# If protocols filter is activate |
if [ $PROTOCOLS_FILTERING = on ]; then |
267,9 → 270,6 |
$IPTABLES -A FORWARD -i $TUNIF -p udp -j REJECT --reject-with icmp-port-unreachable |
$IPTABLES -A FORWARD -i $TUNIF -p icmp -j REJECT |
fi |
# Autorisation des retours de connexions légitimes |
# Allow conntrack |
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT |
# If QOS is activate # |
if [ $QOS = on ] && [ -e /usr/local/etc/alcasar-iptables-qos.sh ]; then |
/web/acc/Alcasar-2.5-presentation-en.pdf |
---|
Cannot display: file marked as a binary type. |
svn:mime-type = application/octet-stream |
Property changes: |
Deleted: svn:mime-type |
-application/octet-stream |
\ No newline at end of property |
/web/acc/alcasar-2.5-presentation-en.pdf |
---|
Cannot display: file marked as a binary type. |
svn:mime-type = application/octet-stream |
Property changes: |
Added: svn:mime-type |
+application/octet-stream |
\ No newline at end of property |
/web/acc/alcasar-2.5-exploitation.pdf |
---|
Cannot display: file marked as a binary type. |
svn:mime-type = application/octet-stream |