PacketFence - BTS - PacketFence
View Issue Details
0001401PacketFenceconfigurationpublic2012-03-15 10:532015-02-18 10:59
fgaudreault 
 
lowtweakN/A
closedopen 
3.2.0 
3.6.1 
0001401: Add DNAT iptables rules for DNS in registration
In VLAN mode, we should add DNAT statements in the input-vlan chain to redirect static DNS traffic to our DNS server.

ie. A user have DNS configured manually in its config, we would blackhole him correctly without have to change its settings

Reported by Rich Graves @ Carleton College
IPT lines :
-A PREROUTING -s (quarantine net) ! -d (quarantine if) -p udp --dport 53 -j DNAT --to-destination (quarantine if)
-A PREROUTING -s (isolation net) ! -d (isolation if) -p udp --dport 53 -j DNAT --to-destination (isolation if)
No tags attached.
Issue History
2012-03-15 10:53fgaudreaultNew Issue
2012-10-19 12:19fgaudreaultTarget Version => general
2012-10-26 16:18fgaudreaultTarget Versiongeneral => 3.6.1
2015-02-18 10:59lmunroNote Added: 0003909
2015-02-18 10:59lmunroStatusnew => closed

Notes
(0003909)
lmunro   
2015-02-18 10:59   
Obsolete bug tracker entries.
PF 4 introduced changes that either make these irrelevant or impossible to reproduce.

New issues are moving to github issues.