| 35,6 → 35,8 |
|---|
| SSH_LAN_ADMIN_FROM=`grep ^SSH_ADMIN_FROM= $CONF_FILE|cut -d"=" -f2|cut -d"/" -f1` |
| SSH_LAN_ADMIN_FROM=${SSH_LAN_ADMIN_FROM:="0.0.0.0"} |
| SSH_LAN_ADMIN_FROM=$([ "$SSH_LAN_ADMIN_FROM" == "0.0.0.0" ] && echo "$PRIVATE_NETWORK_MASK" || echo "$SSH_LAN_ADMIN_FROM" ) |
| interlan=`grep ^INTERLAN= $CONF_FILE|cut -d"=" -f2` |
| interlan=${interlan:=off} |
| |
| # On vide (flush) toutes les règles existantes |
| # Flush all existing rules |
| 118,6 → 120,13 |
|---|
| # Conntrack on forward |
| $IPTABLES -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT |
| |
| # On autorise (ou pas) les utilisateurs à accéder au réseau situé entre ALCASAR et le routeur Internet |
| # Users are allowed (or not allowed) to access the network between ALCASAR and the Internet router |
| if [ "$interlan" != "on" ] |
| then |
| $IPTABLES -A FORWARD -i $TUNIF -d $public_ip_mask -j DROP |
| fi |
| |
| # Insertion de règles de blocage |
| # Here, we add block rules |
| if [ -s /usr/local/etc/alcasar-ip-blocked ]; then |