https://marmits.com/w/index.php?action=history&feed=atom&title=OpenWrt_%C3%A0_tester 2026-05-25T10:09:26Z Historique des versions pour cette page sur le wiki MediaWiki 1.43.8 https://marmits.com/w/index.php?title=OpenWrt_%C3%A0_tester&diff=1569&oldid=prev 2024-05-22T11:58:37Z

<p><span class="autocomment">iptables IS DEAD</span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="fr"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Version précédente</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version du 22 mai 2024 à 13:58</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l2">Ligne 2 :</td> <td colspan="2" class="diff-lineno">Ligne 2 :</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[https://www.youtube.com/watch?v=lHLPZlZLWgs NFTABLES  (net filter table) youtube]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[https://www.youtube.com/watch?v=lHLPZlZLWgs NFTABLES  (net filter table) youtube]</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>[https://www.malekal.com/ufw-vs-iptables-quel-est-le-meilleur/</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>[https://www.malekal.com/ufw-vs-iptables-quel-est-le-meilleur/ <ins style="font-weight: bold; text-decoration: none;">ufw-vs-iptables]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> </div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== à voir 1 ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== à voir 1 ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables</div></td></tr> <!-- diff cache key wiki2025-mar_:diff:1.41:old-1568:rev-1569:php=table --> </table>

Geo https://marmits.com/w/index.php?title=OpenWrt_%C3%A0_tester&diff=1568&oldid=prev 2024-05-22T11:58:16Z

<p><span class="autocomment">à voir 1</span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="fr"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Version précédente</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version du 22 mai 2024 à 13:58</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Ligne 1 :</td> <td colspan="2" class="diff-lineno">Ligne 1 :</td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">== iptables IS DEAD ==</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[https://www.youtube.com/watch?v=lHLPZlZLWgs NFTABLES  (net filter table) youtube]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[https://www.malekal.com/ufw-vs-iptables-quel-est-le-meilleur/</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== à voir 1 ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== à voir 1 ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables</div></td></tr> <!-- diff cache key wiki2025-mar_:diff:1.41:old-1567:rev-1568:php=table --> </table>

Geo https://marmits.com/w/index.php?title=OpenWrt_%C3%A0_tester&diff=1567&oldid=prev 2024-05-22T11:56:20Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="fr"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Version précédente</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version du 22 mai 2024 à 13:56</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l36">Ligne 36 :</td> <td colspan="2" class="diff-lineno">Ligne 36 :</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>2</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>2</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&lt;<del style="font-weight: bold; text-decoration: none;">/</del>pre&gt;</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>config rule</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>config rule</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> option family &#039;ipv4&#039;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> option family &#039;ipv4&#039;</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l85">Ligne 85 :</td> <td colspan="2" class="diff-lineno">Ligne 85 :</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://web.mit.edu/rhel-doc/4/RH-DOCS/rhel-sg-fr-4/s1-firewall-ipt-fwd.html</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://web.mit.edu/rhel-doc/4/RH-DOCS/rhel-sg-fr-4/s1-firewall-ipt-fwd.html</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Catégorie:OpenWrt Firewall]]</ins></div></td></tr> <!-- diff cache key wiki2025-mar_:diff:1.41:old-1566:rev-1567:php=table --> </table>

Geo https://marmits.com/w/index.php?title=OpenWrt_%C3%A0_tester&diff=1566&oldid=prev 2024-05-22T11:55:47Z

<p>Page créée avec « == à voir 1 == http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables https://unix.stackexchange.… »</p> <p><b>Nouvelle page</b></p><div>== à voir 1 ==<br /> http://www.guiguishow.info/2011/08/13/openwrt-securiser-lacces-ssh/#toc-1755-un-changement-du-port-dcoute-et-une-rgle-iptables<br /> <br /> https://unix.stackexchange.com/questions/382419/what-type-of-traffic-applies-to-input-for-a-wan-zone<br /> <br /> &lt;pre&gt;<br /> iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT #-i eth0 =&gt; ssh router sur lan <br /> &lt;/pre&gt;<br /> <br /> https://www.tutos.eu/6873<br /> <br /> http://irp.nain-t.net/doku.php/130netfilter:060_iptables<br /> <br /> la règle FORWARD par zone régit le trafic entre les interfaces de la même zone. Ceci est différent des &quot;transferts&quot; qui régissent le trafic entre différentes zones.<br /> <br /> sur la zone<br /> Les options ci-dessous contrôlent les politiques de transfert entre cette zone (lan) et d&#039;autres zones. Les zones de destination couvrent le trafic acheminé provenant du lan. Les zones source correspondent au trafic transféré provenant d&#039;autres zones ciblées sur LAN. La règle de transfert est unidirectionnelle, par ex. un transfert de lan à wan n&#039;implique pas une autorisation de transfert de wan à lan également.<br /> a tester:<br /> exemple<br /> 1- par default INPUT rejet sur vlan4<br /> 2 - mais on autorise le lan sur 4.12 de vlan4<br /> <br /> 1<br /> &lt;pre&gt;<br /> config zone<br /> option name &#039;vlan4&#039;<br /> option input &#039;REJECT&#039; on empeche le trafic entrant dans cette zone (interfaces)<br /> option output &#039;ACCEPT&#039;<br /> option forward &#039;REJECT&#039; // on empêche les interfaces de communiquer entre elle dans cette zone<br /> // si dans list netkork il y a plusieurs interface<br /> list network &#039;vlan4&#039;<br /> config forwarding<br /> option src &#039;vlan4&#039;<br /> option dest &#039;wan&#039;<br /> &lt;/pre&gt;<br /> <br /> 2<br /> &lt;/pre&gt;<br /> config rule<br /> option family &#039;ipv4&#039;<br /> list proto &#039;tcp&#039;<br /> option src &#039;lan&#039;<br /> option target &#039;ACCEPT&#039;<br /> list dest_ip &#039;192.168.4.12&#039;<br /> option dest &#039;vlan4&#039;<br /> option dest_port &#039;2012 80 443&#039;<br /> option name &#039;lan-airdisk-ssh-80-443&#039;<br /> <br /> config rule<br /> option family &#039;ipv4&#039;<br /> option src &#039;lan&#039;<br /> option target &#039;ACCEPT&#039;<br /> option name &#039;lan-airdisk-smb&#039;<br /> list dest_ip &#039;192.168.4.12&#039;<br /> option dest &#039;vlan4&#039;<br /> option dest_port &#039;139 445&#039;<br /> <br /> config rule<br /> option src &#039;lan&#039;<br /> option target &#039;ACCEPT&#039;<br /> option name &#039;lan-airdisk-smb&#039;<br /> option family &#039;ipv4&#039;<br /> list proto &#039;udp&#039;<br /> list dest_ip &#039;192.168.4.12&#039;<br /> option dest &#039;vlan4&#039;<br /> option dest_port &#039;137 138&#039;<br /> <br /> config rule<br /> option target &#039;ACCEPT&#039;<br /> option family &#039;ipv4&#039;<br /> list proto &#039;tcp&#039;<br /> list proto &#039;udp&#039;<br /> option src &#039;lan&#039;<br /> list dest_ip &#039;192.168.4.12&#039;<br /> option dest &#039;vlan4&#039;<br /> option name &#039;lan-airdisk-upnp&#039;<br /> option dest_port &#039;5000 5001 50001 50002&#039;<br /> &lt;/pre&gt;<br /> <br /> https://www.titanhq.fr/blog/meilleure-configuration-segmentation-zone-securite-pare-feu/<br /> <br /> https://www.n0tes.fr/2019/04/17/Differences-entre-IDS-IPS-et-Firewall/<br /> <br /> https://zestedesavoir.com/tutoriels/2789/les-reseaux-de-zero/<br /> <br /> http://web.mit.edu/rhel-doc/4/RH-DOCS/rhel-sg-fr-4/s1-firewall-ipt-fwd.html</div>

Geo