Ne NAT pas le traffic vers l'intérieur

7 years ago · b395d0d258
2 changed files with 2 additions and 1 deletions
--- a/archi.nft
+++ b/archi.nft
@ -22,5 +22,5 @@ define range_aloes = 10.66.0.0/27
 define range_prerezotage = 10.68.0.0/16
 define range_public = 193.48.225.0/24

-define ip_self_public = 193.48.225.254
+define ip_self_public = 193.48.225.2
 define ip_radius = 10.7.0.124
--- a/nat.nft
+++ b/nat.nft
@ -18,6 +18,7 @@ table ip nat {
 	chain postrouting {
 		type nat hook postrouting priority 100

+		meta oifname != $if_supelec return

 		ip daddr != {10.0.0.0/8, $range_public} ip saddr vmap {
 			$range_adherent : goto adherent_nat,