Subversion Repositories ALCASAR

Rev

Rev 767 | Rev 958 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 767 Rev 856
Line 1... Line 1...
1 
#!/bin/bash
 1 
#!/bin/bash
2 
# $Id: alcasar-iptables-bypass.sh 767 2011-11-11 08:00:07Z richard $
 2 
# $Id: alcasar-iptables-bypass.sh 856 2012-04-10 11:32:34Z franck $
3 
 
 3 
 
4 
# alcasar-iptables-bypass.sh
 4 
# alcasar-iptables-bypass.sh
5 
# by Rexy - 3abtux
 5 
# by Rexy - 3abtux
6 
# This script is distributed under the Gnu General Public License (GPL)
 6 
# This script is distributed under the Gnu General Public License (GPL)
7 
 
 7 
 
Line 43... Line 43...
43 
 
 43 
 
44 
# On autorise tout sur loopback
 44 
# On autorise tout sur loopback
45 
# accept all on loopback
 45 
# accept all on loopback
46 
$IPTABLES -A INPUT -i lo -j ACCEPT
 46 
$IPTABLES -A INPUT -i lo -j ACCEPT
47 
 
 47 
 
- 
 
 48 
# Insertion de règles de blocage (Devel)
- 
 
 49 
# Here, we add block rules (Devel)
- 
 
 50 
if [ -s /usr/local/etc/alcasar-iptables-block ]; then
- 
 
 51 
    while read ip_blocked
- 
 
 52 
    do
- 
 
 53 
      echo "Network Address blocked : $ip_blocked"
- 
 
 54 
      $IPTABLES -A FORWARD -d $ip_blocked -j ULOG --ulog-prefix "RULE IP-blocked -- REJECT "
- 
 
 55 
      $IPTABLES -A FORWARD -d $ip_blocked -j REJECT
- 
 
 56 
      $IPTABLES -A FORWARD -s $ip_blocked -j ULOG --ulog-prefix "RULE IP-blocked -- REJECT "
- 
 
 57 
      $IPTABLES -A FORWARD -s $ip_blocked -j REJECT
- 
 
 58 
    done < /usr/local/etc/alcasar-iptables-block
- 
 
 59 
fi
- 
 
 60 
 
48 
# on autorise les requêtes dhcp
 61 
# on autorise les requêtes dhcp
49 
# accept dhcp
 62 
# accept dhcp
50 
$IPTABLES -A INPUT -i $INTIF -p udp -m udp --sport bootpc --dport bootps -j ACCEPT
 63 
$IPTABLES -A INPUT -i $INTIF -p udp -m udp --sport bootpc --dport bootps -j ACCEPT
51 
 
 64 
 
52 
# On drop le broadcast et le multicast sur les interfaces (sans Log)
 65 
# On drop le broadcast et le multicast sur les interfaces (sans Log)