Changes between Version 13 and Version 14 of PaedmlAnpassungen

Timestamp:

Oct 5, 2013, 2:13:21 PM (13 years ago)

Author:

bau

Comment:

--

PaedmlAnpassungen

@@ -6 +6 @@
 = Firewall-Einstellungen in ''/etc/init.d/linuxmuster-base''  =
 
-in der Funktion start_firewall nach :
+Für die LTSP_Server müssen in der Firewll Freigaben gemacht werden. Das passiert am Ende der Datei im Abschnitt start und restart:
 
 {{{
-      # accept ipcop
-      iptables -A IN-$IFACE -s $ipcopip/32 -j ACCEPT
-}}}
-
-einfügen:
-
-{{{
-      # accept ipcop
-      iptables -A IN-$IFACE -s $ipcopip/32 -j ACCEPT
-
+workaround(){
       # accept proxy
-      iptables -A IN-$IFACE -s 10.32.1.251/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.1.251/32 -j ACCEPT
 
       # accept ProxMoxPaedml
-      iptables -A IN-$IFACE -s 10.32.1.2/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.1.2/32 -j ACCEPT
 
       # accept LTSP-SERVER-KVM (proxmoxltsp1-proxmoxltsp7)
-      iptables -A IN-$IFACE -s 10.32.2.101/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.102/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.103/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.104/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.105/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.106/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.107/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.101/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.102/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.103/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.104/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.105/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.106/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.107/32 -j ACCEPT
 
       # accept LTSP-SERVER (ltsp1-ltsp7)
-      iptables -A IN-$IFACE -s 10.32.2.1/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.2/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.3/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.4/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.5/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.6/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.7/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.1/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.2/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.3/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.4/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.5/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.6/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.7/32 -j ACCEPT
 
       # accept Boot-Sticks (1-4)
-      iptables -A IN-$IFACE -s 10.32.2.201/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.202/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.203/32 -j ACCEPT
-      iptables -A IN-$IFACE -s 10.32.2.204/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.201/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.202/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.203/32 -j ACCEPT
+      iptables -A IN-eth1-ALLOWED -s 10.32.2.204/32 -j ACCEPT
+}
+
+
+RC=0
+
+case "$1" in
+
+ start)
+  start_firewall ; RC="$?"
+  workaround ;
+  ;;
+
+ stop)
+  stop_firewall ; RC="$?"
+  ;;
+
+ restart)
+  stop_firewall ; RC="$?"
+  if [ "$RC" = "0" ]; then
+   start_firewall ; RC="$?"
+  fi
+  workaround ;
+  ;;
+
+  reload)
+   reload_firewall ; RC="$?"
+   workaround ;
+
+  ;;
 
 }}}
-