• [^] # je suis chiant

    Posté par . En réponse au message DMZ. Évalué à 0.

    Merci, bon en pompant la config shorewall sur mandriva, j'en arrive au résultat:

    /var/log/shorewall-init.log

    (..............) Processing /etc/shorewall/rules...
    Processing Actions...
    Generating Transitive Closure of Used-action List...
    Processing /usr/share/shorewall/action.Drop for Chain Drop...
    ..Expanding Macro /usr/share/shorewall/macro.Auth...
    Rule "REJECT - - tcp 113 - -" added.
    ..End Macro
    Rule "dropBcast " added.
    ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs...
    Rule "ACCEPT - - icmp fragmentation-needed - -" added.
    Rule "ACCEPT - - icmp time-exceeded - -" added.
    ..End Macro
    Rule "dropInvalid " added.
    ..Expanding Macro /usr/share/shorewall/macro.SMB...
    Rule "DROP - - udp 135,445 - -" added.
    Rule "DROP - - udp 137:139 - -" added.
    Rule "DROP - - udp 1024: 137 -" added.
    Rule "DROP - - tcp 135,139,445 - -" added.
    ..End Macro
    ..Expanding Macro /usr/share/shorewall/macro.DropUPnP...
    Rule "DROP - - udp 1900 - -" added.
    ..End Macro
    Rule "dropNotSyn - - tcp " added.
    ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep...
    Rule "DROP - - udp - 53 -" added.
    ..End Macro
    Processing /usr/share/shorewall/action.Reject for Chain Reject...
    ..Expanding Macro /usr/share/shorewall/macro.Auth...
    Rule "REJECT - - tcp 113 - -" added.
    ..End Macro
    Rule "dropBcast " added.
    ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs...
    Rule "ACCEPT - - icmp fragmentation-needed - -" added.
    Rule "ACCEPT - - icmp time-exceeded - -" added.
    ..End Macro
    Rule "dropInvalid " added.
    ..Expanding Macro /usr/share/shorewall/macro.SMB...
    Rule "REJECT - - udp 135,445 - -" added.
    Rule "REJECT - - udp 137:139 - -" added.
    Rule "REJECT - - udp 1024: 137 -" added.
    Rule "REJECT - - tcp 135,139,445 - -" added.
    ..End Macro
    ..Expanding Macro /usr/share/shorewall/macro.DropUPnP...
    Rule "DROP - - udp 1900 - -" added.
    ..End Macro
    Rule "dropNotSyn - - tcp " added.
    ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep...
    Rule "DROP - - udp - 53 -" added.
    ..End Macro
    Processing /etc/shorewall/policy...
    Policy ACCEPT for fw to net using chain fw2net
    Policy ACCEPT for fw to loc using chain fw2loc
    Policy ACCEPT for loc to fw using chain loc2fw
    Policy ACCEPT for loc to net using chain loc2net
    Setting up Traffic Control Rules...
    Validating /etc/shorewall/tcdevices...
    Validating /etc/shorewall/tcclasses...
    Activating Rules...
    Shorewall Restarted
    touch: cannot touch `/var/lock/subsys/shorewall': No such file or directory


    Je continue à creuser c'est important...