Corosync + Securité
This commit is contained in:
committed by
Pierre Coimbra
parent
38895929df
commit
9f6b6831c7
@@ -29,10 +29,9 @@ coro eth3 tcpflags,nosmurfs,logmartians
|
|||||||
### /etc/shorewall/policy
|
### /etc/shorewall/policy
|
||||||
Définition de la politique globale du pare-feu
|
Définition de la politique globale du pare-feu
|
||||||
```
|
```
|
||||||
#SOURCE DEST POLICY LOGLEVEL RATE CONNLIMIT
|
#SOURCE DEST POLICY LOGLEVEL
|
||||||
|
|
||||||
$FW net ACCEPT
|
$FW net ACCEPT
|
||||||
$FW coro ACCEPT
|
|
||||||
krkn net ACCEPT
|
krkn net ACCEPT
|
||||||
ext net ACCEPT
|
ext net ACCEPT
|
||||||
|
|
||||||
@@ -62,6 +61,9 @@ ACCEPT $FW krkn icmp
|
|||||||
ACCEPT $FW ext icmp
|
ACCEPT $FW ext icmp
|
||||||
ACCEPT $FW net icmp
|
ACCEPT $FW net icmp
|
||||||
|
|
||||||
|
ACCEPT $FW coro udp 5404,5405
|
||||||
|
ACCEPT coro $FW udp 5404,5405
|
||||||
|
|
||||||
ACCEPT krkn ext tcp 80,443
|
ACCEPT krkn ext tcp 80,443
|
||||||
ACCEPT net $FW tcp 8006
|
ACCEPT net $FW tcp 8006
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user