| /scripts/alcasar-CA.sh |
|---|
| 216,7 → 216,7 |
| $LOCATION |
| $ORGANIZATION |
| Server certificate for $hostname |
| $IPADDR |
| $hostname |
| $SRVMAIL" | |
| openssl req -config $DIR_TMP/ssl.conf -new -key $SRVKEY -out $SRVREQ 2>> $DIR_TMP/openssl-log |
| /scripts/alcasar-iptables.sh |
|---|
| 228,22 → 228,21 |
| ############################# |
| # filtering outside OUTPUT. # |
| ############################# |
| # On laisse tout sortir sur toutes les cartes sauf celle qui est connectée sur l'extérieur |
| # Everything is allowed but traffic through outside network interface |
| $IPTABLES -A OUTPUT ! -o $EXTIF -j ACCEPT |
| # On autorise le parefeu à requêter les DNS externes |
| # On autorise les requêtes DNS vers les serveurs DNS identifiés |
| # Allow DNS requests to identified DNS servers |
| $IPTABLES -A OUTPUT -o $EXTIF -d $DNSSERVERS -p udp --dport domain -m state --state NEW -j ACCEPT |
| # On autorise les requêtes http sortantes |
| # HTTP requests are allowed |
| $IPTABLES -A OUTPUT -o $EXTIF -p tcp --dport http -j ACCEPT |
| # On autorise les requêtes ntp |
| # NTP requests are allowed |
| $IPTABLES -A OUTPUT -o $EXTIF -p udp --dport ntp -j ACCEPT |
| # On autorise les requêtes ICMP (ping) |
| # ICMP (ping) requests are allowed |
| $IPTABLES -A OUTPUT -o $EXTIF -p icmp --icmp-type 8 -j ACCEPT |
| # Traduction dynamique d'adresse en sortie |
| # Dynamic NAT on EXTIF |
| /scripts/alcasar-conf.sh |
|---|
| 39,7 → 39,7 |
| /usr/local/sbin/alcasar-mysql.sh -dump |
| cp /var/Save/base/`ls /var/Save/base|tail -1` $DIR_UPDATE |
| # Sauvegarde du nom d'organisme |
| echo `hostname` > $DIR_UPDATE/hostname |
| echo `cat /root/ALCASAR-parameters.txt|grep Organisme|cut -d":" -f2|tr -d " "` > $DIR_UPDATE/organisme |
| # Sauvegarde du logo |
| cp -f $DIR_WEB/images/organisme.png $DIR_UPDATE |
| # Sauvegarde des fichiers exploités par dansguardian |
| 78,9 → 78,6 |
| --load|-load) |
| cd /tmp |
| tar -xf /tmp/alcasar-conf.tar.gz |
| # Récupération du nom d'organisme |
| ORGANISME=`cat $DIR_UPDATE/hostname|cut -b 9-` |
| hostname `cat $DIR_UPDATE/hostname` |
| # Récupération du logo |
| cp -f $DIR_UPDATE/organisme.png $DIR_WEB/images/ |
| chown apache:apache $DIR_WEB/images/organisme.png $DIR_WEB/intercept.php |
| /scripts/sbin/alcasar-uninstall.sh |
|---|
| 133,13 → 133,13 |
| sleep 1 |
| #DnsMasq |
| echo -en "\n- dnsmasq(4) : " |
| echo -en "\n- dnsmasq(3) : " |
| if [ -e /etc/init.d/dnsmasq ] |
| then |
| [ -e /etc/dnsmasq.conf.default ] && mv /etc/dnsmasq.conf.default /etc/dnsmasq.conf && echo -n "1, " |
| [ -e /etc/dnsmasq-forward.conf ] && rm -f /etc/dnsmasq-forward.conf && echo -n "2, " |
| [ -d /etc/dnsmasq.d ] && rm -rf /etc/dnsmasq.d && echo -n "3, " |
| [ -e /etc/init.d/dnsmasq.default ] && mv /etc/init.d/dnsmasq.default /etc/init.d/dnsmasq && echo -n "4" |
| [ -d /etc/dnsmasq.d ] && rm -rf /etc/dnsmasq.d |
| [ -e /etc/init.d/dnsmasq.default ] && mv /etc/init.d/dnsmasq.default /etc/init.d/dnsmasq && echo -n "3" |
| else echo -n "non installé" |
| fi |
| sleep 1 |
| /scripts/sbin/alcasar-bl.sh |
|---|
| 155,7 → 155,7 |
| service dnsmasq stop |
| sleep 1 |
| service dnsmasq start |
| ; |
| ;; |
| *) |
| echo "Argument inconnu :$1"; |
| echo "$usage" |