iptables muet.

This commit is contained in:
Alexandre Anriot 2005-09-15 05:05:13 +00:00
parent 7f3bc49f61
commit 80538647d7

View file

@ -36,7 +36,7 @@ sub Alter() {
# ajout
if ($action == 1) {
system("/sbin/iptables -I EVOAUTH -s $ip -j ACCEPT > /dev/null") &&
system("/sbin/iptables -I EVOAUTH -s $ip -j ACCEPT 2&>1") &&
&Evoauth::Functions::Log("Ajout de $ip aux connectés.") &&
&Evoauth::Functions::Mail("Connexion", $ip);
}
@ -149,19 +149,19 @@ sub Control() {
if ($action == 1) {
while ( ($key, $value) = each(%conf) ) {
@tmp1 = split (/\t/, $value);
system("/sbin/iptables -t nat -A PREROUTING -p $tmp1[2] -i ppp0 --dport $tmp1[1] -j DNAT --to $tmp1[0]:$tmp1[1]");
system("/sbin/iptables -t nat -A PREROUTING -p $tmp1[2] -i ppp0 --dport $tmp1[1] -j DNAT --to $tmp1[0]:$tmp1[1] 2&>1");
}
&Evoauth::Functions::Log("1 - Regles de PREROUTING charges");
system("/sbin/iptables -N EVOAUTH") &&
system("/sbin/iptables -A EVOAUTH -j DROP");
system("/sbin/iptables -N EVOAUTH 2&>1") &&
system("/sbin/iptables -A EVOAUTH -j DROP 2&>1");
&Evoauth::Functions::Log("2 - Tables crées");
while ( ($key, $value) = each(%conf) ) {
@tmp2 = split (/\t/, $value);
system("/sbin/iptables -A FORWARD -p $tmp2[2] -i ppp0 -o eth0 --dport $tmp2[1] -j EVOAUTH");
system("/sbin/iptables -A FORWARD -p $tmp2[2] -i ppp0 -o eth0 --dport $tmp2[1] -j EVOAUTH 2&>1");
}
&Evoauth::Functions::Log("3 - Règles chargées");
@ -178,13 +178,13 @@ sub Control() {
while ( ($key, $value) = each(%conf) ) {
@tmp3 = split (/\t/, $value);
system("/sbin/iptables -D FORWARD -p $tmp3[2] -i ppp0 -o eth0 --dport $tmp3[1] -j EVOAUTH");
system("/sbin/iptables -t nat -D PREROUTING -p $tmp3[2] -i ppp0 --dport $tmp3[1] -j DNAT --to $tmp3[0]:$tmp3[1]");
system("/sbin/iptables -D FORWARD -p $tmp3[2] -i ppp0 -o eth0 --dport $tmp3[1] -j EVOAUTH 2&>1");
system("/sbin/iptables -t nat -D PREROUTING -p $tmp3[2] -i ppp0 --dport $tmp3[1] -j DNAT --to $tmp3[0]:$tmp3[1] 2&>1");
}
&Evoauth::Functions::Log("2 - Annulation FORWARD + PREROUTING");
system("/sbin/iptables -X EVOAUTH") &&
system("/sbin/iptables -X EVOAUTH 2&>1") &&
&Evoauth::Functions::Log("3 - Suppression de la table EVOAUTH");
&Evoauth::Functions::Log("Evoauth vient de s'arreter.");