Add missing annexes
This commit is contained in:
parent
e14105c485
commit
5e99d186a7
4 changed files with 170 additions and 0 deletions
31
annexes/annexe_nftables.tex
Normal file
31
annexes/annexe_nftables.tex
Normal file
|
@ -0,0 +1,31 @@
|
|||
\chapter{script NFTables pour les bornes}
|
||||
\label{chap:nftables}
|
||||
|
||||
\begin{lstlisting}[caption={Fichier de définition des règles de pare-feu}]
|
||||
#!/usr/sbin/nft -f
|
||||
|
||||
flush ruleset
|
||||
|
||||
table inet filter {
|
||||
chain input {
|
||||
type filter hook input priority 0;
|
||||
ct state established,related accept
|
||||
tcp dport ssh accept
|
||||
iif lo accept
|
||||
drop
|
||||
}
|
||||
chain forward {
|
||||
type filter hook forward priority 0;
|
||||
drop
|
||||
}
|
||||
chain output {
|
||||
type filter hook output priority 0;
|
||||
ct state established,related accept
|
||||
iif lo accept
|
||||
tcp dport { http, https } accept
|
||||
udp dport 53 accept
|
||||
ip daddr 127.0.0.1 tcp dport 631 accept
|
||||
drop
|
||||
}
|
||||
}
|
||||
\end{lstlisting}
|
Reference in a new issue