cmaffio/pannello
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Aggiunta gestione regole in ingresso

Browse Source
This commit is contained in:
cmaffio
2016-06-21 16:23:20 +02:00
parent 3b97704f6d
commit da3fe71d69
9 changed files with 733 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
firewall/tmp/fw.new
View File

@@ -1,19 +1,20 @@
fw_custom_after_chain_creation() {
# REGOLE DINAMICHE
# REGOLE DINAMICHE
### START REGOLA-U1 PERMANENTE ###
iptables -N REGOLA-U1
iptables -I REGOLA-U1 -p tcp -o -s 192.168.1.1 --sport 25 -d 151.1.219.70 --dport 443 -j ACCEPT
iptables -I REGOLA-U1 -p tcp -i -d 192.168.1.1 --dport 25 -s 151.1.219.70 --sport 443 -j ACCEPT
iptables -I FORWARD -j REGOLA-U1
### STOP REGOLA-U1 PERMANENTE ###
### START REGOLA-U3 ###
iptables -N REGOLA-U3
iptables -I REGOLA-U3 -p udp -o -s 192.168.1.3 --sport 45 -d 151.1.219.70 --dport 6754 -j ACCEPT
iptables -I REGOLA-U3 -p udp -i -d 192.168.1.3 --dport 45 -s 151.1.219.70 --sport 6754 -j ACCEPT
iptables -I FORWARD -j REGOLA-U3
### STOP REGOLA-U3 ###
# FINE REGOLE DINAMICHE
### START REGOLA-I1 PERMANENTE ###
iptables -I PREROUTING -t nat -p tcp -i --dport 3056 -j DNAT --to 192.168.1.2:3306
iptables -N REGOLA-I1
iptables -I REGOLA-I1 -p tcp -i -s 10.10.40.9 -d 192.168.1.2 --dport 3306 -j ACCEPT
iptables -I REGOLA-I1 -p tcp -o -d 10.10.40.9 -s 192.168.1.2 --sport 3306 -j ACCEPT
iptables -I FORWARD -j REGOLA-I1
### STOP REGOLA-I1 PERMANENTE ###
# FINE REGOLE DINAMICHE
@@ -39,3 +40,4 @@ fw_custom_after_finished() {
true
}