Anomalie #3567
corriger les règles allow_dest eole-firewall
Status:
Fermé
Priority:
Normal
Assigned To:
Category:
-
Target version:
Distribution:
EOLE 2.3
Description
Il reste des règles allow_dest incohérentes dans 00_root_sphynx.fw :
allow_dest(interface='eth0', ip='0/0', protocol='udp', port='500') allow_dest(interface='eth0', ip='0/0', protocol='udp', port='4500') allow_dest(interface='eth0', ip='0/0', protocol='esp') ... allow_dest(interface='%%interface', ip='%%ip_address/%%netmask_address', port='%%arv_port') allow_dest(interface='%%interface', ip='%%ip_address/%%netmask_address', protocol='icmp', typ='echo-request') allow_dest(interface='eth0', ip='%%ip_etab/%%ip_etab.netmask_source_etab', protocol='ipsec', dest_port='%%ip_etab.port_dest_etab')
à remplacer par allow_src
Related issues
Associated revisions
Add "view problem" in the central view part 1 see #3567
Add "view problem" in the central view part 2 see #3567
end last see #3567
tmpl/00_root_sphynx.fw : mise en cohérence des règles allow_des vers
allow_src
fixes #3567 @10m
History
#1 Updated by Fabrice Barconnière almost 11 years ago
- Status changed from Nouveau to Résolu
- % Done changed from 0 to 100
Appliqué par commit f4056b44122f0c68d2fe6554fb94128655c4499e.
#2 Updated by Fabrice Barconnière almost 11 years ago
- Status changed from Résolu to Nouveau
- % Done changed from 100 to 90
allow_src(interface='eth0', ip='0/0', protocol='esp') n'est pas accepté.
#3 Updated by Joël Cuissinat almost 11 years ago
- Status changed from Nouveau to Résolu
- Assigned To set to Fabrice Barconnière
- % Done changed from 90 to 100
OK après résolution de #3571 :)
#4 Updated by Joël Cuissinat almost 11 years ago
- Status changed from Résolu to Fermé
conf-sphynx_2.3-eole74~2
root@sphynx:~# grep allow_dest /usr/share/eole/creole/distrib/00_root_sphynx.fw root@sphynx:~# grep allow_dest /usr/share/eole/firewall/00_root_sphynx.fw root@sphynx:~#