|
|
|
@ -56,6 +56,8 @@ class iptables:
|
|
|
|
|
self.nat_settings = getattr(firewall_config, 'nat', None)
|
|
|
|
|
self.portail_settings = getattr(firewall_config, 'portail', None)
|
|
|
|
|
self.accueils = getattr(firewall_config, 'accueils', [])
|
|
|
|
|
self.log_ignore_v4 = getattr(firewall_config, 'log_ignore_v4', [])
|
|
|
|
|
self.log_ignore_v6 = getattr(firewall_config, 'log_ignore_v6', [])
|
|
|
|
|
|
|
|
|
|
def commit(self, chain):
|
|
|
|
|
self.add(chain, "COMMIT\n")
|
|
|
|
@ -505,7 +507,14 @@ class iptables:
|
|
|
|
|
"""Logage des packet sur les interfaces choisies"""
|
|
|
|
|
self.init_mangle(subtable, decision="-")
|
|
|
|
|
self.jump_all_trafic("mangle", "PREROUTING", subtable)
|
|
|
|
|
self.add_in_subtable("mangle", subtable, '-m state --state NEW -j LOG --log-prefix "LOG_ALL " ')
|
|
|
|
|
|
|
|
|
|
for net in self.log_ignore_v4:
|
|
|
|
|
self.add_in_subtable("mangle4", subtable, f'-s {net} -j RETURN')
|
|
|
|
|
|
|
|
|
|
for net in self.log_ignore_v6:
|
|
|
|
|
self.add_in_subtable("mangle6", subtable, f'-s {net} -j RETURN')
|
|
|
|
|
|
|
|
|
|
self.add_in_subtable("mangle", subtable, '-m state --state NEW -j LOG --log-prefix "LOG_ALL "')
|
|
|
|
|
|
|
|
|
|
def mss(self, subtable='MSS'):
|
|
|
|
|
"""Reglage correct du MSS pour éviter les problèmes de MTU"""
|
|
|
|
|