PacketFence - BTS - PacketFence | |||||
View Issue Details | |||||
ID | Project | Category | View Status | Date Submitted | Last Update |
0001401 | PacketFence | configuration | public | 2012-03-15 10:53 | 2015-02-18 10:59 |
Reporter | fgaudreault | ||||
Assigned To | |||||
Priority | low | Severity | tweak | Reproducibility | N/A |
Status | closed | Resolution | open | ||
Platform | OS | OS Version | |||
Product Version | 3.2.0 | ||||
Target Version | 3.6.1 | Fixed in Version | |||
fixed in git revision | |||||
fixed in mtn revision | |||||
Summary | 0001401: Add DNAT iptables rules for DNS in registration | ||||
Description | In VLAN mode, we should add DNAT statements in the input-vlan chain to redirect static DNS traffic to our DNS server. ie. A user have DNS configured manually in its config, we would blackhole him correctly without have to change its settings Reported by Rich Graves @ Carleton College | ||||
Steps To Reproduce | |||||
Additional Information | IPT lines : -A PREROUTING -s (quarantine net) ! -d (quarantine if) -p udp --dport 53 -j DNAT --to-destination (quarantine if) -A PREROUTING -s (isolation net) ! -d (isolation if) -p udp --dport 53 -j DNAT --to-destination (isolation if) | ||||
Tags | No tags attached. | ||||
Relationships | |||||
Attached Files | |||||
Issue History | |||||
Date Modified | Username | Field | Change | ||
2012-03-15 10:53 | fgaudreault | New Issue | |||
2012-10-19 12:19 | fgaudreault | Target Version | => general | ||
2012-10-26 16:18 | fgaudreault | Target Version | general => 3.6.1 | ||
2015-02-18 10:59 | lmunro | Note Added: 0003909 | |||
2015-02-18 10:59 | lmunro | Status | new => closed |
Notes | |||||
|
|||||
|
|