[{"data":1,"prerenderedAt":1621},["ShallowReactive",2],{"blog-\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta":3,"blog-\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta-surround":1564,"blog-\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta-certifications":1620},{"id":4,"title":5,"body":6,"categories":1551,"cover":1553,"cover_contain":283,"credly_badge_id":1554,"date":1555,"description":1556,"extension":1557,"meta":1558,"navigation":283,"path":1559,"related_certifications":1554,"seo":1560,"slug":1561,"stem":1562,"__hash__":1563},"blog\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta.md","Configuration de zone pare-feu avec Vyatta",{"type":7,"value":8,"toc":1542},"minimark",[9,14,18,22,45,79,99,104,111,118,121,142,163,169,175,408,413,635,640,1083,1088,1362,1369,1372,1398,1401,1426,1429,1452,1455,1478,1481,1506,1509,1535,1538],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Vous devez appliquer une politique de sécurité cohérente entre vos réseaux : voici comment configurer des zones de pare-feu avec Vyatta.",[10,19,21],{"id":20},"vyatta-politique-de-zone","Vyatta : politique de zone",[15,23,24,25,29,30,33,34,37,38],{},"Dans cet article j’utilise la ",[26,27,28],"strong",{},"version 6.6R1"," de ",[26,31,32],{},"Vyatta",".",[35,36],"br",{},"\nLa majorité de cet article est basée sur la ",[39,40,44],"a",{"href":41,"rel":42},"http:\u002F\u002Fwww.vyatta.com\u002Fdownloads\u002Fdocumentation\u002FVC6.5\u002FVyatta-Firewall_6.5R3_v02.pdf",[43],"nofollow","documentation officielle.",[15,46,47,48,51,52,55,56,59,60,63,65,66,59,69,72,74,75,78],{},"Les ",[26,49,50],{},"zone-policy"," (politiques de zone) permettent de délimiter les ",[26,53,54],{},"accès"," : ",[26,57,58],{},"entrants"," et ",[26,61,62],{},"sortants.",[35,64],{},"\nPar défaut elles n’acceptent aucune communication entrante et sortante et c’est pour cette raison que les zones sont couplées avec des ",[26,67,68],{},"règles pare-feu strictes",[26,70,71],{},"précises.",[35,73],{},"\nLe but est de pouvoir autoriser ou non certains ",[26,76,77],{},"flux réseaux"," entre elles : exemple DMZ.",[15,80,81,82,85,86,85,89,85,92,95,96,98],{},"Et si vous aviez l’habitude de parler ",[26,83,84],{},"vert",", ",[26,87,88],{},"rouge",[26,90,91],{},"orange",[26,93,94],{},"bleu"," alors accrochez-vous! car les interfaces colorées n’existent pas dans Vyatta, du moins pas de cette façon là.",[35,97],{},"\nNotez que l’idée d’une interface rouge ou verte est simplement une convention, pas une restriction.",[100,101,103],"h3",{"id":102},"schéma-conventionnel-des-différentes-zones","Schéma conventionnel des différentes zones",[15,105,106,107,110],{},"Le réseau répond à une ",[26,108,109],{},"politique de sécurité interne",". Chaque zone utilise une seule ou plusieurs interfaces avec des règles de pare-feux précises entre elles.",[15,112,113],{},[114,115],"img",{"alt":116,"src":117},"","\u002Fimages\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta\u002F7aca829c77.png",[15,119,120],{},"Récapitulatif :",[15,122,123,127,129,132,134,137,139],{},[124,125,126],"em",{},"Zone réseau internet :  eth0, eth1",[35,128],{},[124,130,131],{},"Zone démilitarisée :  eth2",[35,133],{},[124,135,136],{},"Zone réseau local :  eth3",[35,138],{},[124,140,141],{},"Zone local VPN :  ZONE-LOCAL",[15,143,144,145,33,148,150,151,59,154,157,158,33],{},"Pourquoi j’utilise 2 cartes (eth0 et eth1) et pas une seule ? Tout simplement parce-que je loue des ",[26,146,147],{},"adresses routées sur internet",[35,149],{},"\nN’oubliez pas vos règles ",[26,152,153],{},"NAT",[26,155,156],{},"DHCP"," expliquées dans ",[39,159,162],{"href":160,"rel":161},"https:\u002F\u002F\u002F\u002Fwww.kassianoff.fr\u002Fblog\u002Ffr\u002Fconfiguration-de-base-sous-vyatta",[43],"cet article",[100,164,166],{"id":165},"configuration-des-zones-pare-feux-dans-vyatta",[26,167,168],{},"Configuration des zones + pare-feux dans Vyatta :",[15,170,171,174],{},[26,172,173],{},"Zone réseau internet"," avec pare-feux :",[176,177,181],"pre",{"className":178,"code":179,"language":180,"meta":116,"style":116},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","set zone-policy zone internet\nset zone-policy zone internet description \"internet\"\nset zone-policy zone internet default-action drop\nset zone-policy zone internet interface eth0\nset zone-policy zone internet interface eth1\n\nset firewall name internet_trafic\nset firawall name internet_trafic default-action accept\nset firewall name internet_trafic description “Autorise trafic internet”\nset firewall name internet_trafic rule 1 action accept\nset firewall name internet_trafic rule 1 state established enable\nset firewall name internet_trafic rule 1 state related enable\n","bash",[182,183,184,203,228,245,262,278,285,299,317,339,362,386],"code",{"__ignoreMap":116},[185,186,189,193,197,200],"span",{"class":187,"line":188},"line",1,[185,190,192],{"class":191},"s2Zo4","set",[185,194,196],{"class":195},"sfazB"," zone-policy",[185,198,199],{"class":195}," zone",[185,201,202],{"class":195}," internet\n",[185,204,206,208,210,212,215,218,222,225],{"class":187,"line":205},2,[185,207,192],{"class":191},[185,209,196],{"class":195},[185,211,199],{"class":195},[185,213,214],{"class":195}," internet",[185,216,217],{"class":195}," description",[185,219,221],{"class":220},"sMK4o"," \"",[185,223,224],{"class":195},"internet",[185,226,227],{"class":220},"\"\n",[185,229,231,233,235,237,239,242],{"class":187,"line":230},3,[185,232,192],{"class":191},[185,234,196],{"class":195},[185,236,199],{"class":195},[185,238,214],{"class":195},[185,240,241],{"class":195}," default-action",[185,243,244],{"class":195}," drop\n",[185,246,248,250,252,254,256,259],{"class":187,"line":247},4,[185,249,192],{"class":191},[185,251,196],{"class":195},[185,253,199],{"class":195},[185,255,214],{"class":195},[185,257,258],{"class":195}," interface",[185,260,261],{"class":195}," eth0\n",[185,263,265,267,269,271,273,275],{"class":187,"line":264},5,[185,266,192],{"class":191},[185,268,196],{"class":195},[185,270,199],{"class":195},[185,272,214],{"class":195},[185,274,258],{"class":195},[185,276,277],{"class":195}," eth1\n",[185,279,281],{"class":187,"line":280},6,[185,282,284],{"emptyLinePlaceholder":283},true,"\n",[185,286,288,290,293,296],{"class":187,"line":287},7,[185,289,192],{"class":191},[185,291,292],{"class":195}," firewall",[185,294,295],{"class":195}," name",[185,297,298],{"class":195}," internet_trafic\n",[185,300,302,304,307,309,312,314],{"class":187,"line":301},8,[185,303,192],{"class":191},[185,305,306],{"class":195}," firawall",[185,308,295],{"class":195},[185,310,311],{"class":195}," internet_trafic",[185,313,241],{"class":195},[185,315,316],{"class":195}," accept\n",[185,318,320,322,324,326,328,330,333,336],{"class":187,"line":319},9,[185,321,192],{"class":191},[185,323,292],{"class":195},[185,325,295],{"class":195},[185,327,311],{"class":195},[185,329,217],{"class":195},[185,331,332],{"class":195}," “Autorise",[185,334,335],{"class":195}," trafic",[185,337,338],{"class":195}," internet”\n",[185,340,342,344,346,348,350,353,357,360],{"class":187,"line":341},10,[185,343,192],{"class":191},[185,345,292],{"class":195},[185,347,295],{"class":195},[185,349,311],{"class":195},[185,351,352],{"class":195}," rule",[185,354,356],{"class":355},"sbssI"," 1",[185,358,359],{"class":195}," action",[185,361,316],{"class":195},[185,363,365,367,369,371,373,375,377,380,383],{"class":187,"line":364},11,[185,366,192],{"class":191},[185,368,292],{"class":195},[185,370,295],{"class":195},[185,372,311],{"class":195},[185,374,352],{"class":195},[185,376,356],{"class":355},[185,378,379],{"class":195}," state",[185,381,382],{"class":195}," established",[185,384,385],{"class":195}," enable\n",[185,387,389,391,393,395,397,399,401,403,406],{"class":187,"line":388},12,[185,390,192],{"class":191},[185,392,292],{"class":195},[185,394,295],{"class":195},[185,396,311],{"class":195},[185,398,352],{"class":195},[185,400,356],{"class":355},[185,402,379],{"class":195},[185,404,405],{"class":195}," related",[185,407,385],{"class":195},[15,409,410,174],{},[26,411,412],{},"Zone démilitarisée",[176,414,416],{"className":178,"code":415,"language":180,"meta":116,"style":116},"set zone-policy zone dmz\nset zone-policy zone dmz description \"dmz\"\nset zone-policy zone dmz default-action drop\nset zone-policy zone dmz interface eth2\n\nset firewall name internet_vers_dmz\nset firawall name internet_vers_dmz default-action drop\nset firewall name internet_vers_dmz description “filtrage du trafic internet vers dmz”\nset firewall name internet_vers_dmz rule 1 action accept\nset firewall name internet_vers_dmz rule 1 destination addresse X.X.X.X (adresse de votre serveur)\nset firewall name internet_vers_dmz rule 1 destination port 80,443\nset firewall name internet_vers_dmz rule 1 protocol tcp\n",[182,417,418,429,449,463,478,482,493,508,536,554,593,615],{"__ignoreMap":116},[185,419,420,422,424,426],{"class":187,"line":188},[185,421,192],{"class":191},[185,423,196],{"class":195},[185,425,199],{"class":195},[185,427,428],{"class":195}," dmz\n",[185,430,431,433,435,437,440,442,444,447],{"class":187,"line":205},[185,432,192],{"class":191},[185,434,196],{"class":195},[185,436,199],{"class":195},[185,438,439],{"class":195}," dmz",[185,441,217],{"class":195},[185,443,221],{"class":220},[185,445,446],{"class":195},"dmz",[185,448,227],{"class":220},[185,450,451,453,455,457,459,461],{"class":187,"line":230},[185,452,192],{"class":191},[185,454,196],{"class":195},[185,456,199],{"class":195},[185,458,439],{"class":195},[185,460,241],{"class":195},[185,462,244],{"class":195},[185,464,465,467,469,471,473,475],{"class":187,"line":247},[185,466,192],{"class":191},[185,468,196],{"class":195},[185,470,199],{"class":195},[185,472,439],{"class":195},[185,474,258],{"class":195},[185,476,477],{"class":195}," eth2\n",[185,479,480],{"class":187,"line":264},[185,481,284],{"emptyLinePlaceholder":283},[185,483,484,486,488,490],{"class":187,"line":280},[185,485,192],{"class":191},[185,487,292],{"class":195},[185,489,295],{"class":195},[185,491,492],{"class":195}," internet_vers_dmz\n",[185,494,495,497,499,501,504,506],{"class":187,"line":287},[185,496,192],{"class":191},[185,498,306],{"class":195},[185,500,295],{"class":195},[185,502,503],{"class":195}," internet_vers_dmz",[185,505,241],{"class":195},[185,507,244],{"class":195},[185,509,510,512,514,516,518,520,523,526,528,530,533],{"class":187,"line":301},[185,511,192],{"class":191},[185,513,292],{"class":195},[185,515,295],{"class":195},[185,517,503],{"class":195},[185,519,217],{"class":195},[185,521,522],{"class":195}," “filtrage",[185,524,525],{"class":195}," du",[185,527,335],{"class":195},[185,529,214],{"class":195},[185,531,532],{"class":195}," vers",[185,534,535],{"class":195}," dmz”\n",[185,537,538,540,542,544,546,548,550,552],{"class":187,"line":319},[185,539,192],{"class":191},[185,541,292],{"class":195},[185,543,295],{"class":195},[185,545,503],{"class":195},[185,547,352],{"class":195},[185,549,356],{"class":355},[185,551,359],{"class":195},[185,553,316],{"class":195},[185,555,556,558,560,562,564,566,568,571,574,577,581,584,587,590],{"class":187,"line":341},[185,557,192],{"class":191},[185,559,292],{"class":195},[185,561,295],{"class":195},[185,563,503],{"class":195},[185,565,352],{"class":195},[185,567,356],{"class":355},[185,569,570],{"class":195}," destination",[185,572,573],{"class":195}," addresse",[185,575,576],{"class":195}," X.X.X.X",[185,578,580],{"class":579},"sTEyZ"," (adresse ",[185,582,583],{"class":195},"de",[185,585,586],{"class":195}," votre",[185,588,589],{"class":195}," serveur",[185,591,592],{"class":579},")\n",[185,594,595,597,599,601,603,605,607,609,612],{"class":187,"line":364},[185,596,192],{"class":191},[185,598,292],{"class":195},[185,600,295],{"class":195},[185,602,503],{"class":195},[185,604,352],{"class":195},[185,606,356],{"class":355},[185,608,570],{"class":195},[185,610,611],{"class":195}," port",[185,613,614],{"class":195}," 80,443\n",[185,616,617,619,621,623,625,627,629,632],{"class":187,"line":388},[185,618,192],{"class":191},[185,620,292],{"class":195},[185,622,295],{"class":195},[185,624,503],{"class":195},[185,626,352],{"class":195},[185,628,356],{"class":355},[185,630,631],{"class":195}," protocol",[185,633,634],{"class":195}," tcp\n",[15,636,637,174],{},[26,638,639],{},"Zone lan",[176,641,643],{"className":178,"code":642,"language":180,"meta":116,"style":116},"set zone-policy zone lan\nset zone-policy zone lan description \"lan\"\nset zone-policy zone lan default-action drop\nset zone-policy zone lan interface eth3\n\nset firewall name lan_vers_dmz\nset firewall name lan_vers_dmz description “Autoriser le lan vers dmz”\nset firewall name lan_vers_dmz rule 1 action accept\nset firewall name lan_vers_dmz rule 1 destination adresse X.X.X.X (adresse de votre serveur)\nset firewall name lan_vers_dmz rule 1 destination port 22,80,443\nset firewall name lan_vers_dmz_rule 1 source adresse X.X.X.X\u002FX (adresse reseau du lan)\nset firewall name lan_vers_dmz rule 1 protocol tcp\nset firewall name lan_vers_dmz rule 2 action accept \nset firewall name lan_vers_dmz rule 2 icmp type-name any\nset firewall name lan_vers_dmz rule 2 protocol icmp\n\nset firewall name lan_vers_vyatta rule 1 action accept\nset firewall name lan_vers_vyatta rule 1 destination adresse X.X.X.X\u002FX (adresse reseau du lan)\nset firewall name lan_vers_vyatta rule 1 source adresse X.X.X.X\u002FX (adresse reseau du vpn)set firewall name lan_vers_dmz rule 1 protocol tcp\nset firewall name lan_vers_vyatta rule 2 action accept \nset firewall name lan_vers_vyatta rule 2 icmp type-name any\nset firewall name lan_vers_vyatta rule 2 protocol icmp\n",[182,644,645,656,676,690,705,709,720,745,763,794,815,847,865,889,913,933,938,958,989,1022,1043,1064],{"__ignoreMap":116},[185,646,647,649,651,653],{"class":187,"line":188},[185,648,192],{"class":191},[185,650,196],{"class":195},[185,652,199],{"class":195},[185,654,655],{"class":195}," lan\n",[185,657,658,660,662,664,667,669,671,674],{"class":187,"line":205},[185,659,192],{"class":191},[185,661,196],{"class":195},[185,663,199],{"class":195},[185,665,666],{"class":195}," lan",[185,668,217],{"class":195},[185,670,221],{"class":220},[185,672,673],{"class":195},"lan",[185,675,227],{"class":220},[185,677,678,680,682,684,686,688],{"class":187,"line":230},[185,679,192],{"class":191},[185,681,196],{"class":195},[185,683,199],{"class":195},[185,685,666],{"class":195},[185,687,241],{"class":195},[185,689,244],{"class":195},[185,691,692,694,696,698,700,702],{"class":187,"line":247},[185,693,192],{"class":191},[185,695,196],{"class":195},[185,697,199],{"class":195},[185,699,666],{"class":195},[185,701,258],{"class":195},[185,703,704],{"class":195}," eth3\n",[185,706,707],{"class":187,"line":264},[185,708,284],{"emptyLinePlaceholder":283},[185,710,711,713,715,717],{"class":187,"line":280},[185,712,192],{"class":191},[185,714,292],{"class":195},[185,716,295],{"class":195},[185,718,719],{"class":195}," lan_vers_dmz\n",[185,721,722,724,726,728,731,733,736,739,741,743],{"class":187,"line":287},[185,723,192],{"class":191},[185,725,292],{"class":195},[185,727,295],{"class":195},[185,729,730],{"class":195}," lan_vers_dmz",[185,732,217],{"class":195},[185,734,735],{"class":195}," “Autoriser",[185,737,738],{"class":195}," le",[185,740,666],{"class":195},[185,742,532],{"class":195},[185,744,535],{"class":195},[185,746,747,749,751,753,755,757,759,761],{"class":187,"line":301},[185,748,192],{"class":191},[185,750,292],{"class":195},[185,752,295],{"class":195},[185,754,730],{"class":195},[185,756,352],{"class":195},[185,758,356],{"class":355},[185,760,359],{"class":195},[185,762,316],{"class":195},[185,764,765,767,769,771,773,775,777,779,782,784,786,788,790,792],{"class":187,"line":319},[185,766,192],{"class":191},[185,768,292],{"class":195},[185,770,295],{"class":195},[185,772,730],{"class":195},[185,774,352],{"class":195},[185,776,356],{"class":355},[185,778,570],{"class":195},[185,780,781],{"class":195}," adresse",[185,783,576],{"class":195},[185,785,580],{"class":579},[185,787,583],{"class":195},[185,789,586],{"class":195},[185,791,589],{"class":195},[185,793,592],{"class":579},[185,795,796,798,800,802,804,806,808,810,812],{"class":187,"line":341},[185,797,192],{"class":191},[185,799,292],{"class":195},[185,801,295],{"class":195},[185,803,730],{"class":195},[185,805,352],{"class":195},[185,807,356],{"class":355},[185,809,570],{"class":195},[185,811,611],{"class":195},[185,813,814],{"class":195}," 22,80,443\n",[185,816,817,819,821,823,826,828,831,833,836,838,841,843,845],{"class":187,"line":364},[185,818,192],{"class":191},[185,820,292],{"class":195},[185,822,295],{"class":195},[185,824,825],{"class":195}," lan_vers_dmz_rule",[185,827,356],{"class":355},[185,829,830],{"class":195}," source",[185,832,781],{"class":195},[185,834,835],{"class":195}," X.X.X.X\u002FX",[185,837,580],{"class":579},[185,839,840],{"class":195},"reseau",[185,842,525],{"class":195},[185,844,666],{"class":195},[185,846,592],{"class":579},[185,848,849,851,853,855,857,859,861,863],{"class":187,"line":388},[185,850,192],{"class":191},[185,852,292],{"class":195},[185,854,295],{"class":195},[185,856,730],{"class":195},[185,858,352],{"class":195},[185,860,356],{"class":355},[185,862,631],{"class":195},[185,864,634],{"class":195},[185,866,868,870,872,874,876,878,881,883,886],{"class":187,"line":867},13,[185,869,192],{"class":191},[185,871,292],{"class":195},[185,873,295],{"class":195},[185,875,730],{"class":195},[185,877,352],{"class":195},[185,879,880],{"class":355}," 2",[185,882,359],{"class":195},[185,884,885],{"class":195}," accept",[185,887,888],{"class":579}," \n",[185,890,892,894,896,898,900,902,904,907,910],{"class":187,"line":891},14,[185,893,192],{"class":191},[185,895,292],{"class":195},[185,897,295],{"class":195},[185,899,730],{"class":195},[185,901,352],{"class":195},[185,903,880],{"class":355},[185,905,906],{"class":195}," icmp",[185,908,909],{"class":195}," type-name",[185,911,912],{"class":195}," any\n",[185,914,916,918,920,922,924,926,928,930],{"class":187,"line":915},15,[185,917,192],{"class":191},[185,919,292],{"class":195},[185,921,295],{"class":195},[185,923,730],{"class":195},[185,925,352],{"class":195},[185,927,880],{"class":355},[185,929,631],{"class":195},[185,931,932],{"class":195}," icmp\n",[185,934,936],{"class":187,"line":935},16,[185,937,284],{"emptyLinePlaceholder":283},[185,939,941,943,945,947,950,952,954,956],{"class":187,"line":940},17,[185,942,192],{"class":191},[185,944,292],{"class":195},[185,946,295],{"class":195},[185,948,949],{"class":195}," lan_vers_vyatta",[185,951,352],{"class":195},[185,953,356],{"class":355},[185,955,359],{"class":195},[185,957,316],{"class":195},[185,959,961,963,965,967,969,971,973,975,977,979,981,983,985,987],{"class":187,"line":960},18,[185,962,192],{"class":191},[185,964,292],{"class":195},[185,966,295],{"class":195},[185,968,949],{"class":195},[185,970,352],{"class":195},[185,972,356],{"class":355},[185,974,570],{"class":195},[185,976,781],{"class":195},[185,978,835],{"class":195},[185,980,580],{"class":579},[185,982,840],{"class":195},[185,984,525],{"class":195},[185,986,666],{"class":195},[185,988,592],{"class":579},[185,990,992,994,996,998,1000,1002,1004,1006,1008,1010,1012,1014,1016,1019],{"class":187,"line":991},19,[185,993,192],{"class":191},[185,995,292],{"class":195},[185,997,295],{"class":195},[185,999,949],{"class":195},[185,1001,352],{"class":195},[185,1003,356],{"class":355},[185,1005,830],{"class":195},[185,1007,781],{"class":195},[185,1009,835],{"class":195},[185,1011,580],{"class":579},[185,1013,840],{"class":195},[185,1015,525],{"class":195},[185,1017,1018],{"class":195}," vpn",[185,1020,1021],{"class":579},")set firewall name lan_vers_dmz rule 1 protocol tcp\n",[185,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041],{"class":187,"line":1024},20,[185,1026,192],{"class":191},[185,1028,292],{"class":195},[185,1030,295],{"class":195},[185,1032,949],{"class":195},[185,1034,352],{"class":195},[185,1036,880],{"class":355},[185,1038,359],{"class":195},[185,1040,885],{"class":195},[185,1042,888],{"class":579},[185,1044,1046,1048,1050,1052,1054,1056,1058,1060,1062],{"class":187,"line":1045},21,[185,1047,192],{"class":191},[185,1049,292],{"class":195},[185,1051,295],{"class":195},[185,1053,949],{"class":195},[185,1055,352],{"class":195},[185,1057,880],{"class":355},[185,1059,906],{"class":195},[185,1061,909],{"class":195},[185,1063,912],{"class":195},[185,1065,1067,1069,1071,1073,1075,1077,1079,1081],{"class":187,"line":1066},22,[185,1068,192],{"class":191},[185,1070,292],{"class":195},[185,1072,295],{"class":195},[185,1074,949],{"class":195},[185,1076,352],{"class":195},[185,1078,880],{"class":355},[185,1080,631],{"class":195},[185,1082,932],{"class":195},[15,1084,1085,174],{},[26,1086,1087],{},"Zone Vyatta VPN",[176,1089,1091],{"className":178,"code":1090,"language":180,"meta":116,"style":116},"set zone-policy zone vyatta\nset zone-policy zone vyatta description \"zone-local de vyatta\"\nset zone-policy zone vyatta interface local-zone\n\nset firewall name vpn_vers_vyatta\nset firawall name vpn_vers_vyatta default-action accept\nset firewall name vpn_vers_vyatta description “filtrage trafic entrant vers vyatta”\nset firewall name vpn_vers_vyatta rule 1 action drop\nset firewall name vpn_vers_vyatta rule 1 destination addresse X.X.X.X (adresse de votre interface public eth1)\nset firewall name vpn_vers_vyatta rule 1 protocol tcp_udp\n\nset firewall name vpn_vers_vyatta rule 2 action drop\nset firewall name vpn_vers_vyatta rule 2 destination adresse X.X.X.X (adresse de votre interface public eth0)\nset firewall name vpn_vers_vyatta rule 2 destination port 53\nset firewall name vpn_vers_vyatta rule 2 protocol tcp_udp\n",[182,1092,1093,1104,1124,1139,1143,1154,1169,1193,1211,1247,1266,1270,1288,1323,1344],{"__ignoreMap":116},[185,1094,1095,1097,1099,1101],{"class":187,"line":188},[185,1096,192],{"class":191},[185,1098,196],{"class":195},[185,1100,199],{"class":195},[185,1102,1103],{"class":195}," vyatta\n",[185,1105,1106,1108,1110,1112,1115,1117,1119,1122],{"class":187,"line":205},[185,1107,192],{"class":191},[185,1109,196],{"class":195},[185,1111,199],{"class":195},[185,1113,1114],{"class":195}," vyatta",[185,1116,217],{"class":195},[185,1118,221],{"class":220},[185,1120,1121],{"class":195},"zone-local de vyatta",[185,1123,227],{"class":220},[185,1125,1126,1128,1130,1132,1134,1136],{"class":187,"line":230},[185,1127,192],{"class":191},[185,1129,196],{"class":195},[185,1131,199],{"class":195},[185,1133,1114],{"class":195},[185,1135,258],{"class":195},[185,1137,1138],{"class":195}," local-zone\n",[185,1140,1141],{"class":187,"line":247},[185,1142,284],{"emptyLinePlaceholder":283},[185,1144,1145,1147,1149,1151],{"class":187,"line":264},[185,1146,192],{"class":191},[185,1148,292],{"class":195},[185,1150,295],{"class":195},[185,1152,1153],{"class":195}," vpn_vers_vyatta\n",[185,1155,1156,1158,1160,1162,1165,1167],{"class":187,"line":280},[185,1157,192],{"class":191},[185,1159,306],{"class":195},[185,1161,295],{"class":195},[185,1163,1164],{"class":195}," vpn_vers_vyatta",[185,1166,241],{"class":195},[185,1168,316],{"class":195},[185,1170,1171,1173,1175,1177,1179,1181,1183,1185,1188,1190],{"class":187,"line":287},[185,1172,192],{"class":191},[185,1174,292],{"class":195},[185,1176,295],{"class":195},[185,1178,1164],{"class":195},[185,1180,217],{"class":195},[185,1182,522],{"class":195},[185,1184,335],{"class":195},[185,1186,1187],{"class":195}," entrant",[185,1189,532],{"class":195},[185,1191,1192],{"class":195}," vyatta”\n",[185,1194,1195,1197,1199,1201,1203,1205,1207,1209],{"class":187,"line":301},[185,1196,192],{"class":191},[185,1198,292],{"class":195},[185,1200,295],{"class":195},[185,1202,1164],{"class":195},[185,1204,352],{"class":195},[185,1206,356],{"class":355},[185,1208,359],{"class":195},[185,1210,244],{"class":195},[185,1212,1213,1215,1217,1219,1221,1223,1225,1227,1229,1231,1233,1235,1237,1239,1242,1245],{"class":187,"line":319},[185,1214,192],{"class":191},[185,1216,292],{"class":195},[185,1218,295],{"class":195},[185,1220,1164],{"class":195},[185,1222,352],{"class":195},[185,1224,356],{"class":355},[185,1226,570],{"class":195},[185,1228,573],{"class":195},[185,1230,576],{"class":195},[185,1232,580],{"class":579},[185,1234,583],{"class":195},[185,1236,586],{"class":195},[185,1238,258],{"class":195},[185,1240,1241],{"class":195}," public",[185,1243,1244],{"class":195}," eth1",[185,1246,592],{"class":579},[185,1248,1249,1251,1253,1255,1257,1259,1261,1263],{"class":187,"line":341},[185,1250,192],{"class":191},[185,1252,292],{"class":195},[185,1254,295],{"class":195},[185,1256,1164],{"class":195},[185,1258,352],{"class":195},[185,1260,356],{"class":355},[185,1262,631],{"class":195},[185,1264,1265],{"class":195}," tcp_udp\n",[185,1267,1268],{"class":187,"line":364},[185,1269,284],{"emptyLinePlaceholder":283},[185,1271,1272,1274,1276,1278,1280,1282,1284,1286],{"class":187,"line":388},[185,1273,192],{"class":191},[185,1275,292],{"class":195},[185,1277,295],{"class":195},[185,1279,1164],{"class":195},[185,1281,352],{"class":195},[185,1283,880],{"class":355},[185,1285,359],{"class":195},[185,1287,244],{"class":195},[185,1289,1290,1292,1294,1296,1298,1300,1302,1304,1306,1308,1310,1312,1314,1316,1318,1321],{"class":187,"line":867},[185,1291,192],{"class":191},[185,1293,292],{"class":195},[185,1295,295],{"class":195},[185,1297,1164],{"class":195},[185,1299,352],{"class":195},[185,1301,880],{"class":355},[185,1303,570],{"class":195},[185,1305,781],{"class":195},[185,1307,576],{"class":195},[185,1309,580],{"class":579},[185,1311,583],{"class":195},[185,1313,586],{"class":195},[185,1315,258],{"class":195},[185,1317,1241],{"class":195},[185,1319,1320],{"class":195}," eth0",[185,1322,592],{"class":579},[185,1324,1325,1327,1329,1331,1333,1335,1337,1339,1341],{"class":187,"line":891},[185,1326,192],{"class":191},[185,1328,292],{"class":195},[185,1330,295],{"class":195},[185,1332,1164],{"class":195},[185,1334,352],{"class":195},[185,1336,880],{"class":355},[185,1338,570],{"class":195},[185,1340,611],{"class":195},[185,1342,1343],{"class":355}," 53\n",[185,1345,1346,1348,1350,1352,1354,1356,1358,1360],{"class":187,"line":915},[185,1347,192],{"class":191},[185,1349,292],{"class":195},[185,1351,295],{"class":195},[185,1353,1164],{"class":195},[185,1355,352],{"class":195},[185,1357,880],{"class":355},[185,1359,631],{"class":195},[185,1361,1265],{"class":195},[100,1363,1365,1368],{"id":1364},"ajouter-les-règles-pare-feu-aux-zones",[26,1366,1367],{},"Ajouter les règles pare-feu aux zones"," :",[15,1370,1371],{},"Acceptez le trafic de la zone internet vers dmz :",[176,1373,1375],{"className":178,"code":1374,"language":180,"meta":116,"style":116},"set zone-policy zone internet from dmz firewall name internet_trafic\n",[182,1376,1377],{"__ignoreMap":116},[185,1378,1379,1381,1383,1385,1387,1390,1392,1394,1396],{"class":187,"line":188},[185,1380,192],{"class":191},[185,1382,196],{"class":195},[185,1384,199],{"class":195},[185,1386,214],{"class":195},[185,1388,1389],{"class":195}," from",[185,1391,439],{"class":195},[185,1393,292],{"class":195},[185,1395,295],{"class":195},[185,1397,298],{"class":195},[15,1399,1400],{},"Acceptez le trafic de la zone dmz vers d’internet  :",[176,1402,1404],{"className":178,"code":1403,"language":180,"meta":116,"style":116},"set zone-policy zone dmz from internet firewall name internet_vers_dmz\n",[182,1405,1406],{"__ignoreMap":116},[185,1407,1408,1410,1412,1414,1416,1418,1420,1422,1424],{"class":187,"line":188},[185,1409,192],{"class":191},[185,1411,196],{"class":195},[185,1413,199],{"class":195},[185,1415,439],{"class":195},[185,1417,1389],{"class":195},[185,1419,214],{"class":195},[185,1421,292],{"class":195},[185,1423,295],{"class":195},[185,1425,492],{"class":195},[15,1427,1428],{},"Acceptez le trafic de la zone internet vers lan :",[176,1430,1432],{"className":178,"code":1431,"language":180,"meta":116,"style":116},"set zone-policy zone internet from lan name internet_trafic\n",[182,1433,1434],{"__ignoreMap":116},[185,1435,1436,1438,1440,1442,1444,1446,1448,1450],{"class":187,"line":188},[185,1437,192],{"class":191},[185,1439,196],{"class":195},[185,1441,199],{"class":195},[185,1443,214],{"class":195},[185,1445,1389],{"class":195},[185,1447,666],{"class":195},[185,1449,295],{"class":195},[185,1451,298],{"class":195},[15,1453,1454],{},"Acceptez le trafic de la zone dmz vers lan :",[176,1456,1458],{"className":178,"code":1457,"language":180,"meta":116,"style":116},"set zone-policy zone dmz from lan name lan_vers_dmz\n",[182,1459,1460],{"__ignoreMap":116},[185,1461,1462,1464,1466,1468,1470,1472,1474,1476],{"class":187,"line":188},[185,1463,192],{"class":191},[185,1465,196],{"class":195},[185,1467,199],{"class":195},[185,1469,439],{"class":195},[185,1471,1389],{"class":195},[185,1473,666],{"class":195},[185,1475,295],{"class":195},[185,1477,719],{"class":195},[15,1479,1480],{},"Acceptez le trafic de la zone vyatta vers internet :",[176,1482,1484],{"className":178,"code":1483,"language":180,"meta":116,"style":116},"set zone-policy zone vyatta from internet firewall name vpn_vers_vyatta\n",[182,1485,1486],{"__ignoreMap":116},[185,1487,1488,1490,1492,1494,1496,1498,1500,1502,1504],{"class":187,"line":188},[185,1489,192],{"class":191},[185,1491,196],{"class":195},[185,1493,199],{"class":195},[185,1495,1114],{"class":195},[185,1497,1389],{"class":195},[185,1499,214],{"class":195},[185,1501,292],{"class":195},[185,1503,295],{"class":195},[185,1505,1153],{"class":195},[15,1507,1508],{},"Acceptez le trafic de la zone lan vers vyatta :",[176,1510,1512],{"className":178,"code":1511,"language":180,"meta":116,"style":116},"set zone-policy zone lan from vyatta firewall name lan_vers_vyatta\n",[182,1513,1514],{"__ignoreMap":116},[185,1515,1516,1518,1520,1522,1524,1526,1528,1530,1532],{"class":187,"line":188},[185,1517,192],{"class":191},[185,1519,196],{"class":195},[185,1521,199],{"class":195},[185,1523,666],{"class":195},[185,1525,1389],{"class":195},[185,1527,1114],{"class":195},[185,1529,292],{"class":195},[185,1531,295],{"class":195},[185,1533,1534],{"class":195}," lan_vers_vyatta\n",[15,1536,1537],{},"Les zone-policy et les règles firewall n’ont plus de secret pour vous!",[1539,1540,1541],"style",{},"html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}",{"title":116,"searchDepth":205,"depth":205,"links":1543},[1544,1545],{"id":12,"depth":205,"text":13},{"id":20,"depth":205,"text":21,"children":1546},[1547,1548,1549],{"id":102,"depth":230,"text":103},{"id":165,"depth":230,"text":168},{"id":1364,"depth":230,"text":1550},"Ajouter les règles pare-feu aux zones :",[1552],"Réseau","\u002Fimages\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta\u002Fa44b82e35f.jpg",null,"2013-09-15","Les zones de pare-feu initient une politique de sécurité. Vyatta englobera votre réseau dans différentes zones.","md",{},"\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta",{"title":5,"description":1556},"configuration-zone-pare-feu-avec-vyatta","blog\u002Fconfiguration-zone-pare-feu-avec-vyatta","IDBymIJWsHaxwg7vb3LLS1yp1Zw-Uaysb0LI5l9UaZA",[1565,1571,1578,1584,1590,1597,1603,1611],{"title":1566,"path":1567,"stem":1568,"date":1569,"cover":1570,"categories":1554,"children":-1},"GhettoVCB la sauvegarde gratuite de VMware ESXi","\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","blog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","2013-10-08","\u002Fimages\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi\u002Fd8c6089e77.png",{"title":1572,"path":1573,"stem":1574,"date":1575,"cover":1576,"categories":1577,"children":-1},"Configuration des accès à distance VPN avec Vyatta","\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","blog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","2013-10-03","\u002Fimages\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta\u002Fa44b82e35f.jpg",[1552],{"title":1579,"path":1580,"stem":1581,"date":1582,"cover":1583,"categories":1554,"children":-1},"Distribution Arch linux : personnalisation","\u002Fblog\u002Fdistribution-arch-linux-personnalisation","blog\u002Fdistribution-arch-linux-personnalisation","2013-09-25","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-personnalisation\u002F68a1cb957a.png",{"title":1585,"path":1586,"stem":1587,"date":1588,"cover":1589,"categories":1554,"children":-1},"Distribution Arch linux ARM : Raspberry Pi","\u002Fblog\u002Fdistribution-arch-linux-arm-raspberry","blog\u002Fdistribution-arch-linux-arm-raspberry","2013-09-22","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-arm-raspberry\u002Fb426e4efea.png",{"title":1591,"path":1592,"stem":1593,"date":1594,"cover":1595,"categories":1596,"children":-1},"Configuration de base sous Vyatta","\u002Fblog\u002Fconfiguration-base-sous-vyatta","blog\u002Fconfiguration-base-sous-vyatta","2013-09-08","\u002Fimages\u002Fblog\u002Fconfiguration-base-sous-vyatta\u002F8a3fd53886.png",[1552],{"title":1598,"path":1599,"stem":1600,"date":1601,"cover":1602,"categories":1554,"children":-1},"Distribution Arch linux : installation","\u002Fblog\u002Fdistribution-arch-linux-installation","blog\u002Fdistribution-arch-linux-installation","2013-09-01","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-installation\u002F68a1cb957a.png",{"title":1604,"path":1605,"stem":1606,"date":1607,"cover":1608,"categories":1609,"children":-1},"AI Wars, Supply Chain Attack: how to protect yourself from the AI threat?","\u002Fen\u002Fblog\u002Fwebinar-ai-wars-supply-chain-attack-menace-ia","en\u002Fblog\u002Fwebinar-ai-wars-supply-chain-attack-menace-ia","2026-08-07","\u002Fimages\u002Fblog\u002Fwebinar-ai-wars-supply-chain-attack-menace-ia\u002Fthumbnail.jpg",[1610],"Webinar",{"title":1612,"path":1613,"stem":1614,"date":1615,"cover":1616,"categories":1617,"children":-1},"ISO\u002FIEC 27001 Lead Implementer","\u002Fen\u002Fblog\u002Fcertificat-iso27001-lead-implementer","en\u002Fblog\u002Fcertificat-iso27001-lead-implementer","2026-03-05","\u002Fimages\u002Fblog\u002Fcertificat-iso27001-lead-implementer\u002F364fa30a2c.png",[1618,1619],"Certifications","Sécurité",[],1786644881669]