| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] |
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0001401 | PacketFence | configuration | public | 2012-03-15 10:53 | 2015-02-18 10:59 |
|
| Reporter | fgaudreault | |
| Assigned To | | |
| Priority | low | Severity | tweak | Reproducibility | N/A |
| Status | closed | Resolution | open | |
| Platform | | OS | | OS Version | |
| Product Version | 3.2.0 | |
| Target Version | 3.6.1 | Fixed in Version | | |
|
| Summary | 0001401: Add DNAT iptables rules for DNS in registration |
| Description | In VLAN mode, we should add DNAT statements in the input-vlan chain to redirect static DNS traffic to our DNS server.
ie. A user have DNS configured manually in its config, we would blackhole him correctly without have to change its settings
Reported by Rich Graves @ Carleton College |
| Additional Information | IPT lines :
-A PREROUTING -s (quarantine net) ! -d (quarantine if) -p udp --dport 53 -j DNAT --to-destination (quarantine if)
-A PREROUTING -s (isolation net) ! -d (isolation if) -p udp --dport 53 -j DNAT --to-destination (isolation if) |
| Tags | No tags attached. |
|
| fixed in git revision | |
| fixed in mtn revision | |
|
| Attached Files | |
|
Relationships 
Relationships 