Project

General

Profile

Anomalie #3567

corriger les règles allow_dest eole-firewall

Added by Fabrice Barconnière over 7 years ago. Updated over 7 years ago.

Status:
Fermé
Priority:
Normal
Category:
-
Start date:
06/05/2012
Due date:
% Done:

100%

Spent time:
Distribution:
EOLE 2.3

Description

Il reste des règles allow_dest incohérentes dans 00_root_sphynx.fw :

allow_dest(interface='eth0', ip='0/0', protocol='udp', port='500')
allow_dest(interface='eth0', ip='0/0', protocol='udp', port='4500')
allow_dest(interface='eth0', ip='0/0', protocol='esp')
...
allow_dest(interface='%%interface', ip='%%ip_address/%%netmask_address', port='%%arv_port')
allow_dest(interface='%%interface', ip='%%ip_address/%%netmask_address', protocol='icmp', typ='echo-request')
allow_dest(interface='eth0', ip='%%ip_etab/%%ip_etab.netmask_source_etab', protocol='ipsec', dest_port='%%ip_etab.port_dest_etab')

à remplacer par allow_src


Related issues

Related to eole-common - Anomalie #3571: corriger les règles allow_dest eole-firewall Fermé 06/05/2012

Associated revisions

Revision 6a023aba (diff)
Added by moyooo over 7 years ago

Add "view problem" in the central view part 1 see #3567

Revision 70908714 (diff)
Added by moyooo over 7 years ago

Add "view problem" in the central view part 2 see #3567

Revision aa67f75e (diff)
Added by moyooo over 7 years ago

end last see #3567

Revision f4056b44 (diff)
Added by Fabrice Barconnière over 7 years ago

tmpl/00_root_sphynx.fw : mise en cohérence des règles allow_des vers
allow_src
fixes #3567 @10m

History

#1 Updated by Fabrice Barconnière over 7 years ago

  • Status changed from Nouveau to Résolu
  • % Done changed from 0 to 100

#2 Updated by Fabrice Barconnière over 7 years ago

  • Status changed from Résolu to Nouveau
  • % Done changed from 100 to 90

allow_src(interface='eth0', ip='0/0', protocol='esp') n'est pas accepté.

#3 Updated by Joël Cuissinat over 7 years ago

  • Status changed from Nouveau to Résolu
  • Assigned To set to Fabrice Barconnière
  • % Done changed from 90 to 100

OK après résolution de #3571 :)

#4 Updated by Joël Cuissinat over 7 years ago

  • Status changed from Résolu to Fermé

conf-sphynx_2.3-eole74~2

root@sphynx:~# grep allow_dest /usr/share/eole/creole/distrib/00_root_sphynx.fw
root@sphynx:~# grep allow_dest /usr/share/eole/firewall/00_root_sphynx.fw
root@sphynx:~# 

Also available in: Atom PDF