ANNEXE IV: Commandes iptable
# Generated by iptables-save v1.2.7a on Mon Sep 11 15:29:09
2011
*nat :PREROUTING ACCEPT [676328:54829455] :POSTROUTING ACCEPT
[85708:6409241]
:PREROUTING ACCEPT [676328:54829455] :POSTROUTING ACCEPT
[85708:6409241]
:OUTPUT ACCEPT [114436:8473816]
-A PREROUTING -s 193.251.220.5 -d 193.251.220.4 -p tcp -m tcp
--dport 80 -j DNAT --to-
destination X.X.X.2:80
-A PREROUTING -s 193.251.220.6 -d 193.251.220.4 -p tcp -m tcp
--dport 80 -j DNAT --to-
destination X.X.X.2:80
#-A POSTROUTING -s 192.168.77.0/255.255.255.0 -o eth0 -j
MASQUERADE
#-A POSTROUTING -s 199.24.77.0/255.255.255.0 -o eth0 -j
MASQUERADE
-A POSTROUTING -s 192.168.31.0/255.255.255.240 -o eth0 -j
MASQUERADE
-A POSTROUTING -s 199.24.31.0/255.255.255.0 -o eth0 -j
MASQUERADE COMMIT
# Completed on Mon Sep 11 15:29:09 2011
# Generated by iptables-save v1.2.7a on Mon Sep 11 15:29:09
2011
*mangle :PREROUTING ACCEPT [15465406:12469671120] :INPUT
ACCEPT [915023:92604532]
:FORWARD ACCEPT [14238191:12351323595] :OUTPUT ACCEPT
[931358:140745226]
:POSTROUTING ACCEPT [15140763:12490000929] COMMIT
# Completed on Mon Sep 11 15:29:09 2011
# Generated by iptables-save v1.2.7a on Mon Sep 11 15:29:09
2011
*filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [44:2424]
:OUTPUT ACCEPT [0:0] -A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 199.24.31.251 -i eth2 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -s 193.251.220.10 -i eth0 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -s 192.168.31.254 -i eth1 -j REJECT --reject-with
icmp-port-unreachable
#-A INPUT -s 192.168.77.254 -i eth1 -j REJECT --reject-with
icmp-port-unreachable
#-A INPUT -s 199.24.77.254 -i eth1 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -p udp -m state --state NEW -m udp --dport 53 -j
ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -m state --state NEW -j
ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 25 -m state --state NEW
-j ACCEPT
-A INPUT -i eth2 -p tcp -m tcp --dport 22 -m state --state NEW
-j ACCEPT
#-A INPUT -s 193.251.220.16/255.255.255.240 -i eth0 -p tcp -m
tcp --dport 22 -m state --state NEW -j
ACCEPT
-A INPUT -s 193.251.220.0/255.255.255.0 -i eth0 -p tcp -m tcp
--dport 22 -m state --state NEW -j
ACCEPT
-A INPUT -s 41.194.41.192/255.255.255.192 -i eth0 -p tcp -m
tcp --dport 22 -m state --state NEW -j
ACCEPT
-A INPUT -s 82.127.82.242 -i eth0 -p tcp -m tcp --dport 22 -m
state --state NEW -j ACCEPT
-A INPUT -s 193.251.220.5 -i eth0 -p tcp -m tcp --dport 22 -m
state --state NEW -j ACCEPT
iv
Thème : Etude et mise en
oeuvre d'une solution de sécurisation du réseau IP de la
SONITEL
Mémoire de fin de formation en mastère
spécialisé 2010 - 2011
DJIBO BOUBACAR
ANNEXE V: Capture pour configuration VPN site à
site du GPTO /SONITEL
v
Thème : Etude et mise en
oeuvre d'une solution de sécurisation du réseau IP de la
SONITEL
Mémoire de fin de formation en mastère
spécialisé 2010 - 2011
DJIBO BOUBACAR
| 
