[{"data":1,"prerenderedAt":1286},["ShallowReactive",2],{"blog-\u002Fen\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta":3,"blog-\u002Fen\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta-surround":1246,"blog-\u002Fen\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta-certifications":1285},{"id":4,"title":5,"body":6,"categories":1233,"cover":1235,"cover_contain":282,"credly_badge_id":1236,"date":1237,"description":1238,"extension":1239,"meta":1240,"navigation":282,"path":1241,"related_certifications":1236,"seo":1242,"slug":1243,"stem":1244,"__hash__":1245},"blog\u002Fen\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta.md","Firewall Zone Configuration with Vyatta",{"type":7,"value":8,"toc":1224},"minimark",[9,14,18,22,45,78,98,103,110,117,120,141,162,168,174,405,410,588,593,814,819,1044,1051,1054,1080,1083,1108,1111,1134,1137,1160,1163,1188,1191,1217,1220],[10,11,13],"h2",{"id":12},"real-world-use-case","Real-world use case",[15,16,17],"p",{},"You need to apply a consistent security policy between your networks: here's how to configure firewall zones with Vyatta.",[10,19,21],{"id":20},"vyatta-zone-policy","Vyatta: zone policy",[15,23,24,25,29,30,33,34,37,38],{},"In this article, I'm using ",[26,27,28],"strong",{},"version 6.6R1"," of ",[26,31,32],{},"Vyatta",".",[35,36],"br",{},"\nMost of this article is based on the ",[39,40,44],"a",{"href":41,"rel":42},"http:\u002F\u002Fwww.vyatta.com\u002Fdownloads\u002Fdocumentation\u002FVC6.5\u002FVyatta-Firewall_6.5R3_v02.pdf",[43],"nofollow","official documentation.",[15,46,47,50,51,54,55,58,59,33,62,64,65,58,68,33,71,73,74,77],{},[26,48,49],{},"Zone-policies"," let you define ",[26,52,53],{},"access",": ",[26,56,57],{},"inbound"," and ",[26,60,61],{},"outbound",[35,63],{},"\nBy default, they accept no inbound or outbound traffic, which is why zones are paired with ",[26,66,67],{},"strict",[26,69,70],{},"precise firewall rules",[35,72],{},"\nThe goal is to allow or deny certain ",[26,75,76],{},"network traffic"," flows between them: for example, a DMZ.",[15,79,80,81,84,85,84,88,84,91,94,95,97],{},"And if you're used to talking about ",[26,82,83],{},"green",", ",[26,86,87],{},"red",[26,89,90],{},"orange",[26,92,93],{},"blue",", then hold on tight! Because colored interfaces don't exist in Vyatta, at least not in that way.",[35,96],{},"\nNote that the idea of a red or green interface is just a convention, not a restriction.",[99,100,102],"h3",{"id":101},"conventional-diagram-of-the-different-zones","Conventional diagram of the different zones",[15,104,105,106,109],{},"The network follows an ",[26,107,108],{},"internal security policy",". Each zone uses one or more interfaces with precise firewall rules between them.",[15,111,112],{},[113,114],"img",{"alt":115,"src":116},"","\u002Fimages\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta\u002F7aca829c77.png",[15,118,119],{},"Summary:",[15,121,122,126,128,131,133,136,138],{},[123,124,125],"em",{},"Internet network zone: eth0, eth1",[35,127],{},[123,129,130],{},"Demilitarized zone: eth2",[35,132],{},[123,134,135],{},"Local network zone: eth3",[35,137],{},[123,139,140],{},"Local VPN zone: LOCAL-ZONE",[15,142,143,144,33,147,149,150,58,153,156,157,33],{},"Why do I use 2 cards (eth0 and eth1) instead of just one? Simply because I lease ",[26,145,146],{},"routed addresses on the internet",[35,148],{},"\nDon't forget your ",[26,151,152],{},"NAT",[26,154,155],{},"DHCP"," rules explained in ",[39,158,161],{"href":159,"rel":160},"https:\u002F\u002F\u002F\u002Fwww.kassianoff.fr\u002Fblog\u002Ffr\u002Fconfiguration-de-base-sous-vyatta",[43],"this article",[99,163,165],{"id":164},"configuring-zones-firewalls-in-vyatta",[26,166,167],{},"Configuring zones + firewalls in Vyatta:",[15,169,170,173],{},[26,171,172],{},"Internet network zone"," with firewalls:",[175,176,180],"pre",{"className":177,"code":178,"language":179,"meta":115,"style":115},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","set zone-policy zone internet\nset zone-policy zone internet description \"internet\"\nset zone-policy zone internet default-action drop\nset zone-policy zone internet interface eth0\nset zone-policy zone internet interface eth1\n\nset firewall name internet_trafic\nset firawall name internet_trafic default-action accept\nset firewall name internet_trafic description \"Allow internet traffic\"\nset firewall name internet_trafic rule 1 action accept\nset firewall name internet_trafic rule 1 state established enable\nset firewall name internet_trafic rule 1 state related enable\n","bash",[181,182,183,202,227,244,261,277,284,298,316,336,359,383],"code",{"__ignoreMap":115},[184,185,188,192,196,199],"span",{"class":186,"line":187},"line",1,[184,189,191],{"class":190},"s2Zo4","set",[184,193,195],{"class":194},"sfazB"," zone-policy",[184,197,198],{"class":194}," zone",[184,200,201],{"class":194}," internet\n",[184,203,205,207,209,211,214,217,221,224],{"class":186,"line":204},2,[184,206,191],{"class":190},[184,208,195],{"class":194},[184,210,198],{"class":194},[184,212,213],{"class":194}," internet",[184,215,216],{"class":194}," description",[184,218,220],{"class":219},"sMK4o"," \"",[184,222,223],{"class":194},"internet",[184,225,226],{"class":219},"\"\n",[184,228,230,232,234,236,238,241],{"class":186,"line":229},3,[184,231,191],{"class":190},[184,233,195],{"class":194},[184,235,198],{"class":194},[184,237,213],{"class":194},[184,239,240],{"class":194}," default-action",[184,242,243],{"class":194}," drop\n",[184,245,247,249,251,253,255,258],{"class":186,"line":246},4,[184,248,191],{"class":190},[184,250,195],{"class":194},[184,252,198],{"class":194},[184,254,213],{"class":194},[184,256,257],{"class":194}," interface",[184,259,260],{"class":194}," eth0\n",[184,262,264,266,268,270,272,274],{"class":186,"line":263},5,[184,265,191],{"class":190},[184,267,195],{"class":194},[184,269,198],{"class":194},[184,271,213],{"class":194},[184,273,257],{"class":194},[184,275,276],{"class":194}," eth1\n",[184,278,280],{"class":186,"line":279},6,[184,281,283],{"emptyLinePlaceholder":282},true,"\n",[184,285,287,289,292,295],{"class":186,"line":286},7,[184,288,191],{"class":190},[184,290,291],{"class":194}," firewall",[184,293,294],{"class":194}," name",[184,296,297],{"class":194}," internet_trafic\n",[184,299,301,303,306,308,311,313],{"class":186,"line":300},8,[184,302,191],{"class":190},[184,304,305],{"class":194}," firawall",[184,307,294],{"class":194},[184,309,310],{"class":194}," internet_trafic",[184,312,240],{"class":194},[184,314,315],{"class":194}," accept\n",[184,317,319,321,323,325,327,329,331,334],{"class":186,"line":318},9,[184,320,191],{"class":190},[184,322,291],{"class":194},[184,324,294],{"class":194},[184,326,310],{"class":194},[184,328,216],{"class":194},[184,330,220],{"class":219},[184,332,333],{"class":194},"Allow internet traffic",[184,335,226],{"class":219},[184,337,339,341,343,345,347,350,354,357],{"class":186,"line":338},10,[184,340,191],{"class":190},[184,342,291],{"class":194},[184,344,294],{"class":194},[184,346,310],{"class":194},[184,348,349],{"class":194}," rule",[184,351,353],{"class":352},"sbssI"," 1",[184,355,356],{"class":194}," action",[184,358,315],{"class":194},[184,360,362,364,366,368,370,372,374,377,380],{"class":186,"line":361},11,[184,363,191],{"class":190},[184,365,291],{"class":194},[184,367,294],{"class":194},[184,369,310],{"class":194},[184,371,349],{"class":194},[184,373,353],{"class":352},[184,375,376],{"class":194}," state",[184,378,379],{"class":194}," established",[184,381,382],{"class":194}," enable\n",[184,384,386,388,390,392,394,396,398,400,403],{"class":186,"line":385},12,[184,387,191],{"class":190},[184,389,291],{"class":194},[184,391,294],{"class":194},[184,393,310],{"class":194},[184,395,349],{"class":194},[184,397,353],{"class":352},[184,399,376],{"class":194},[184,401,402],{"class":194}," related",[184,404,382],{"class":194},[15,406,407,173],{},[26,408,409],{},"Demilitarized zone",[175,411,413],{"className":177,"code":412,"language":179,"meta":115,"style":115},"set zone-policy zone dmz\nset zone-policy zone dmz description \"dmz\"\nset zone-policy zone dmz default-action drop\nset zone-policy zone dmz interface eth2\n\nset firewall name internet_vers_dmz\nset firawall name internet_vers_dmz default-action drop\nset firewall name internet_vers_dmz description \"filter internet traffic to dmz\"\nset firewall name internet_vers_dmz rule 1 action accept\nset firewall name internet_vers_dmz rule 1 destination addresse X.X.X.X (your server's address)\nset firewall name internet_vers_dmz rule 1 destination port 80,443\nset firewall name internet_vers_dmz rule 1 protocol tcp\n",[181,414,415,426,446,460,475,479,490,505,524,542,578,583],{"__ignoreMap":115},[184,416,417,419,421,423],{"class":186,"line":187},[184,418,191],{"class":190},[184,420,195],{"class":194},[184,422,198],{"class":194},[184,424,425],{"class":194}," dmz\n",[184,427,428,430,432,434,437,439,441,444],{"class":186,"line":204},[184,429,191],{"class":190},[184,431,195],{"class":194},[184,433,198],{"class":194},[184,435,436],{"class":194}," dmz",[184,438,216],{"class":194},[184,440,220],{"class":219},[184,442,443],{"class":194},"dmz",[184,445,226],{"class":219},[184,447,448,450,452,454,456,458],{"class":186,"line":229},[184,449,191],{"class":190},[184,451,195],{"class":194},[184,453,198],{"class":194},[184,455,436],{"class":194},[184,457,240],{"class":194},[184,459,243],{"class":194},[184,461,462,464,466,468,470,472],{"class":186,"line":246},[184,463,191],{"class":190},[184,465,195],{"class":194},[184,467,198],{"class":194},[184,469,436],{"class":194},[184,471,257],{"class":194},[184,473,474],{"class":194}," eth2\n",[184,476,477],{"class":186,"line":263},[184,478,283],{"emptyLinePlaceholder":282},[184,480,481,483,485,487],{"class":186,"line":279},[184,482,191],{"class":190},[184,484,291],{"class":194},[184,486,294],{"class":194},[184,488,489],{"class":194}," internet_vers_dmz\n",[184,491,492,494,496,498,501,503],{"class":186,"line":286},[184,493,191],{"class":190},[184,495,305],{"class":194},[184,497,294],{"class":194},[184,499,500],{"class":194}," internet_vers_dmz",[184,502,240],{"class":194},[184,504,243],{"class":194},[184,506,507,509,511,513,515,517,519,522],{"class":186,"line":300},[184,508,191],{"class":190},[184,510,291],{"class":194},[184,512,294],{"class":194},[184,514,500],{"class":194},[184,516,216],{"class":194},[184,518,220],{"class":219},[184,520,521],{"class":194},"filter internet traffic to dmz",[184,523,226],{"class":219},[184,525,526,528,530,532,534,536,538,540],{"class":186,"line":318},[184,527,191],{"class":190},[184,529,291],{"class":194},[184,531,294],{"class":194},[184,533,500],{"class":194},[184,535,349],{"class":194},[184,537,353],{"class":352},[184,539,356],{"class":194},[184,541,315],{"class":194},[184,543,544,546,548,550,552,554,556,559,562,565,569,572,575],{"class":186,"line":338},[184,545,191],{"class":190},[184,547,291],{"class":194},[184,549,294],{"class":194},[184,551,500],{"class":194},[184,553,349],{"class":194},[184,555,353],{"class":352},[184,557,558],{"class":194}," destination",[184,560,561],{"class":194}," addresse",[184,563,564],{"class":194}," X.X.X.X",[184,566,568],{"class":567},"sTEyZ"," (your ",[184,570,571],{"class":194},"server",[184,573,574],{"class":219},"'",[184,576,577],{"class":194},"s address)\n",[184,579,580],{"class":186,"line":361},[184,581,582],{"class":194},"set firewall name internet_vers_dmz rule 1 destination port 80,443\n",[184,584,585],{"class":186,"line":385},[184,586,587],{"class":194},"set firewall name internet_vers_dmz rule 1 protocol tcp\n",[15,589,590,173],{},[26,591,592],{},"LAN zone",[175,594,596],{"className":177,"code":595,"language":179,"meta":115,"style":115},"set zone-policy zone lan\nset zone-policy zone lan description \"lan\"\nset zone-policy zone lan default-action drop\nset zone-policy zone lan interface eth3\n\nset firewall name lan_vers_dmz\nset firewall name lan_vers_dmz description \"Allow lan to dmz\"\nset firewall name lan_vers_dmz rule 1 action accept\nset firewall name lan_vers_dmz rule 1 destination adresse X.X.X.X (your server's address)\nset firewall name lan_vers_dmz rule 1 destination port 22,80,443\nset firewall name lan_vers_dmz_rule 1 source adresse X.X.X.X\u002FX (lan network address)\nset firewall name lan_vers_dmz rule 1 protocol tcp\nset firewall name lan_vers_dmz rule 2 action accept \nset firewall name lan_vers_dmz rule 2 icmp type-name any\nset firewall name lan_vers_dmz rule 2 protocol icmp\n\nset firewall name lan_vers_vyatta rule 1 action accept\nset firewall name lan_vers_vyatta rule 1 destination adresse X.X.X.X\u002FX (lan network address)\nset firewall name lan_vers_vyatta rule 1 source adresse X.X.X.X\u002FX (vpn network address)set firewall name lan_vers_dmz rule 1 protocol tcp\nset firewall name lan_vers_vyatta rule 2 action accept \nset firewall name lan_vers_vyatta rule 2 icmp type-name any\nset firewall name lan_vers_vyatta rule 2 protocol icmp\n",[181,597,598,609,629,643,658,662,673,693,711,740,745,750,755,761,767,773,778,784,790,796,802,808],{"__ignoreMap":115},[184,599,600,602,604,606],{"class":186,"line":187},[184,601,191],{"class":190},[184,603,195],{"class":194},[184,605,198],{"class":194},[184,607,608],{"class":194}," lan\n",[184,610,611,613,615,617,620,622,624,627],{"class":186,"line":204},[184,612,191],{"class":190},[184,614,195],{"class":194},[184,616,198],{"class":194},[184,618,619],{"class":194}," lan",[184,621,216],{"class":194},[184,623,220],{"class":219},[184,625,626],{"class":194},"lan",[184,628,226],{"class":219},[184,630,631,633,635,637,639,641],{"class":186,"line":229},[184,632,191],{"class":190},[184,634,195],{"class":194},[184,636,198],{"class":194},[184,638,619],{"class":194},[184,640,240],{"class":194},[184,642,243],{"class":194},[184,644,645,647,649,651,653,655],{"class":186,"line":246},[184,646,191],{"class":190},[184,648,195],{"class":194},[184,650,198],{"class":194},[184,652,619],{"class":194},[184,654,257],{"class":194},[184,656,657],{"class":194}," eth3\n",[184,659,660],{"class":186,"line":263},[184,661,283],{"emptyLinePlaceholder":282},[184,663,664,666,668,670],{"class":186,"line":279},[184,665,191],{"class":190},[184,667,291],{"class":194},[184,669,294],{"class":194},[184,671,672],{"class":194}," lan_vers_dmz\n",[184,674,675,677,679,681,684,686,688,691],{"class":186,"line":286},[184,676,191],{"class":190},[184,678,291],{"class":194},[184,680,294],{"class":194},[184,682,683],{"class":194}," lan_vers_dmz",[184,685,216],{"class":194},[184,687,220],{"class":219},[184,689,690],{"class":194},"Allow lan to dmz",[184,692,226],{"class":219},[184,694,695,697,699,701,703,705,707,709],{"class":186,"line":300},[184,696,191],{"class":190},[184,698,291],{"class":194},[184,700,294],{"class":194},[184,702,683],{"class":194},[184,704,349],{"class":194},[184,706,353],{"class":352},[184,708,356],{"class":194},[184,710,315],{"class":194},[184,712,713,715,717,719,721,723,725,727,730,732,734,736,738],{"class":186,"line":318},[184,714,191],{"class":190},[184,716,291],{"class":194},[184,718,294],{"class":194},[184,720,683],{"class":194},[184,722,349],{"class":194},[184,724,353],{"class":352},[184,726,558],{"class":194},[184,728,729],{"class":194}," adresse",[184,731,564],{"class":194},[184,733,568],{"class":567},[184,735,571],{"class":194},[184,737,574],{"class":219},[184,739,577],{"class":194},[184,741,742],{"class":186,"line":338},[184,743,744],{"class":194},"set firewall name lan_vers_dmz rule 1 destination port 22,80,443\n",[184,746,747],{"class":186,"line":361},[184,748,749],{"class":194},"set firewall name lan_vers_dmz_rule 1 source adresse X.X.X.X\u002FX (lan network address)\n",[184,751,752],{"class":186,"line":385},[184,753,754],{"class":194},"set firewall name lan_vers_dmz rule 1 protocol tcp\n",[184,756,758],{"class":186,"line":757},13,[184,759,760],{"class":194},"set firewall name lan_vers_dmz rule 2 action accept \n",[184,762,764],{"class":186,"line":763},14,[184,765,766],{"class":194},"set firewall name lan_vers_dmz rule 2 icmp type-name any\n",[184,768,770],{"class":186,"line":769},15,[184,771,772],{"class":194},"set firewall name lan_vers_dmz rule 2 protocol icmp\n",[184,774,776],{"class":186,"line":775},16,[184,777,283],{"emptyLinePlaceholder":282},[184,779,781],{"class":186,"line":780},17,[184,782,783],{"class":194},"set firewall name lan_vers_vyatta rule 1 action accept\n",[184,785,787],{"class":186,"line":786},18,[184,788,789],{"class":194},"set firewall name lan_vers_vyatta rule 1 destination adresse X.X.X.X\u002FX (lan network address)\n",[184,791,793],{"class":186,"line":792},19,[184,794,795],{"class":194},"set firewall name lan_vers_vyatta rule 1 source adresse X.X.X.X\u002FX (vpn network address)set firewall name lan_vers_dmz rule 1 protocol tcp\n",[184,797,799],{"class":186,"line":798},20,[184,800,801],{"class":194},"set firewall name lan_vers_vyatta rule 2 action accept \n",[184,803,805],{"class":186,"line":804},21,[184,806,807],{"class":194},"set firewall name lan_vers_vyatta rule 2 icmp type-name any\n",[184,809,811],{"class":186,"line":810},22,[184,812,813],{"class":194},"set firewall name lan_vers_vyatta rule 2 protocol icmp\n",[15,815,816,173],{},[26,817,818],{},"Vyatta VPN zone",[175,820,822],{"className":177,"code":821,"language":179,"meta":115,"style":115},"set zone-policy zone vyatta\nset zone-policy zone vyatta description \"vyatta local-zone\"\nset zone-policy zone vyatta interface local-zone\n\nset firewall name vpn_vers_vyatta\nset firawall name vpn_vers_vyatta default-action accept\nset firewall name vpn_vers_vyatta description \"filter inbound traffic to vyatta\"\nset firewall name vpn_vers_vyatta rule 1 action drop\nset firewall name vpn_vers_vyatta rule 1 destination addresse X.X.X.X (your public eth1 interface's address)\nset firewall name vpn_vers_vyatta rule 1 protocol tcp_udp\n\nset firewall name vpn_vers_vyatta rule 2 action drop\nset firewall name vpn_vers_vyatta rule 2 destination adresse X.X.X.X (your public eth0 interface's address)\nset firewall name vpn_vers_vyatta rule 2 destination port 53\nset firewall name vpn_vers_vyatta rule 2 protocol tcp_udp\n",[181,823,824,835,855,870,874,885,900,919,937,971,976,980,985,1001,1024],{"__ignoreMap":115},[184,825,826,828,830,832],{"class":186,"line":187},[184,827,191],{"class":190},[184,829,195],{"class":194},[184,831,198],{"class":194},[184,833,834],{"class":194}," vyatta\n",[184,836,837,839,841,843,846,848,850,853],{"class":186,"line":204},[184,838,191],{"class":190},[184,840,195],{"class":194},[184,842,198],{"class":194},[184,844,845],{"class":194}," vyatta",[184,847,216],{"class":194},[184,849,220],{"class":219},[184,851,852],{"class":194},"vyatta local-zone",[184,854,226],{"class":219},[184,856,857,859,861,863,865,867],{"class":186,"line":229},[184,858,191],{"class":190},[184,860,195],{"class":194},[184,862,198],{"class":194},[184,864,845],{"class":194},[184,866,257],{"class":194},[184,868,869],{"class":194}," local-zone\n",[184,871,872],{"class":186,"line":246},[184,873,283],{"emptyLinePlaceholder":282},[184,875,876,878,880,882],{"class":186,"line":263},[184,877,191],{"class":190},[184,879,291],{"class":194},[184,881,294],{"class":194},[184,883,884],{"class":194}," vpn_vers_vyatta\n",[184,886,887,889,891,893,896,898],{"class":186,"line":279},[184,888,191],{"class":190},[184,890,305],{"class":194},[184,892,294],{"class":194},[184,894,895],{"class":194}," vpn_vers_vyatta",[184,897,240],{"class":194},[184,899,315],{"class":194},[184,901,902,904,906,908,910,912,914,917],{"class":186,"line":286},[184,903,191],{"class":190},[184,905,291],{"class":194},[184,907,294],{"class":194},[184,909,895],{"class":194},[184,911,216],{"class":194},[184,913,220],{"class":219},[184,915,916],{"class":194},"filter inbound traffic to vyatta",[184,918,226],{"class":219},[184,920,921,923,925,927,929,931,933,935],{"class":186,"line":300},[184,922,191],{"class":190},[184,924,291],{"class":194},[184,926,294],{"class":194},[184,928,895],{"class":194},[184,930,349],{"class":194},[184,932,353],{"class":352},[184,934,356],{"class":194},[184,936,243],{"class":194},[184,938,939,941,943,945,947,949,951,953,955,957,959,962,965,967,969],{"class":186,"line":318},[184,940,191],{"class":190},[184,942,291],{"class":194},[184,944,294],{"class":194},[184,946,895],{"class":194},[184,948,349],{"class":194},[184,950,353],{"class":352},[184,952,558],{"class":194},[184,954,561],{"class":194},[184,956,564],{"class":194},[184,958,568],{"class":567},[184,960,961],{"class":194},"public",[184,963,964],{"class":194}," eth1",[184,966,257],{"class":194},[184,968,574],{"class":219},[184,970,577],{"class":194},[184,972,973],{"class":186,"line":338},[184,974,975],{"class":194},"set firewall name vpn_vers_vyatta rule 1 protocol tcp_udp\n",[184,977,978],{"class":186,"line":361},[184,979,283],{"emptyLinePlaceholder":282},[184,981,982],{"class":186,"line":385},[184,983,984],{"class":194},"set firewall name vpn_vers_vyatta rule 2 action drop\n",[184,986,987,990,992,995,998],{"class":186,"line":757},[184,988,989],{"class":194},"set firewall name vpn_vers_vyatta rule 2 destination adresse X.X.X.X (your public eth0 interface",[184,991,574],{"class":219},[184,993,994],{"class":194},"s",[184,996,997],{"class":194}," address",[184,999,1000],{"class":567},")\n",[184,1002,1003,1005,1007,1009,1011,1013,1016,1018,1021],{"class":186,"line":763},[184,1004,191],{"class":190},[184,1006,291],{"class":194},[184,1008,294],{"class":194},[184,1010,895],{"class":194},[184,1012,349],{"class":194},[184,1014,1015],{"class":352}," 2",[184,1017,558],{"class":194},[184,1019,1020],{"class":194}," port",[184,1022,1023],{"class":352}," 53\n",[184,1025,1026,1028,1030,1032,1034,1036,1038,1041],{"class":186,"line":769},[184,1027,191],{"class":190},[184,1029,291],{"class":194},[184,1031,294],{"class":194},[184,1033,895],{"class":194},[184,1035,349],{"class":194},[184,1037,1015],{"class":352},[184,1039,1040],{"class":194}," protocol",[184,1042,1043],{"class":194}," tcp_udp\n",[99,1045,1047,1050],{"id":1046},"adding-firewall-rules-to-zones",[26,1048,1049],{},"Adding firewall rules to zones",":",[15,1052,1053],{},"Allow traffic from the internet zone to the dmz:",[175,1055,1057],{"className":177,"code":1056,"language":179,"meta":115,"style":115},"set zone-policy zone internet from dmz firewall name internet_trafic\n",[181,1058,1059],{"__ignoreMap":115},[184,1060,1061,1063,1065,1067,1069,1072,1074,1076,1078],{"class":186,"line":187},[184,1062,191],{"class":190},[184,1064,195],{"class":194},[184,1066,198],{"class":194},[184,1068,213],{"class":194},[184,1070,1071],{"class":194}," from",[184,1073,436],{"class":194},[184,1075,291],{"class":194},[184,1077,294],{"class":194},[184,1079,297],{"class":194},[15,1081,1082],{},"Allow traffic from the dmz zone to the internet:",[175,1084,1086],{"className":177,"code":1085,"language":179,"meta":115,"style":115},"set zone-policy zone dmz from internet firewall name internet_vers_dmz\n",[181,1087,1088],{"__ignoreMap":115},[184,1089,1090,1092,1094,1096,1098,1100,1102,1104,1106],{"class":186,"line":187},[184,1091,191],{"class":190},[184,1093,195],{"class":194},[184,1095,198],{"class":194},[184,1097,436],{"class":194},[184,1099,1071],{"class":194},[184,1101,213],{"class":194},[184,1103,291],{"class":194},[184,1105,294],{"class":194},[184,1107,489],{"class":194},[15,1109,1110],{},"Allow traffic from the internet zone to the lan:",[175,1112,1114],{"className":177,"code":1113,"language":179,"meta":115,"style":115},"set zone-policy zone internet from lan name internet_trafic\n",[181,1115,1116],{"__ignoreMap":115},[184,1117,1118,1120,1122,1124,1126,1128,1130,1132],{"class":186,"line":187},[184,1119,191],{"class":190},[184,1121,195],{"class":194},[184,1123,198],{"class":194},[184,1125,213],{"class":194},[184,1127,1071],{"class":194},[184,1129,619],{"class":194},[184,1131,294],{"class":194},[184,1133,297],{"class":194},[15,1135,1136],{},"Allow traffic from the dmz zone to the lan:",[175,1138,1140],{"className":177,"code":1139,"language":179,"meta":115,"style":115},"set zone-policy zone dmz from lan name lan_vers_dmz\n",[181,1141,1142],{"__ignoreMap":115},[184,1143,1144,1146,1148,1150,1152,1154,1156,1158],{"class":186,"line":187},[184,1145,191],{"class":190},[184,1147,195],{"class":194},[184,1149,198],{"class":194},[184,1151,436],{"class":194},[184,1153,1071],{"class":194},[184,1155,619],{"class":194},[184,1157,294],{"class":194},[184,1159,672],{"class":194},[15,1161,1162],{},"Allow traffic from the vyatta zone to the internet:",[175,1164,1166],{"className":177,"code":1165,"language":179,"meta":115,"style":115},"set zone-policy zone vyatta from internet firewall name vpn_vers_vyatta\n",[181,1167,1168],{"__ignoreMap":115},[184,1169,1170,1172,1174,1176,1178,1180,1182,1184,1186],{"class":186,"line":187},[184,1171,191],{"class":190},[184,1173,195],{"class":194},[184,1175,198],{"class":194},[184,1177,845],{"class":194},[184,1179,1071],{"class":194},[184,1181,213],{"class":194},[184,1183,291],{"class":194},[184,1185,294],{"class":194},[184,1187,884],{"class":194},[15,1189,1190],{},"Allow traffic from the lan zone to vyatta:",[175,1192,1194],{"className":177,"code":1193,"language":179,"meta":115,"style":115},"set zone-policy zone lan from vyatta firewall name lan_vers_vyatta\n",[181,1195,1196],{"__ignoreMap":115},[184,1197,1198,1200,1202,1204,1206,1208,1210,1212,1214],{"class":186,"line":187},[184,1199,191],{"class":190},[184,1201,195],{"class":194},[184,1203,198],{"class":194},[184,1205,619],{"class":194},[184,1207,1071],{"class":194},[184,1209,845],{"class":194},[184,1211,291],{"class":194},[184,1213,294],{"class":194},[184,1215,1216],{"class":194}," lan_vers_vyatta\n",[15,1218,1219],{},"Zone-policies and firewall rules hold no more secrets for you!",[1221,1222,1223],"style",{},"html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}",{"title":115,"searchDepth":204,"depth":204,"links":1225},[1226,1227],{"id":12,"depth":204,"text":13},{"id":20,"depth":204,"text":21,"children":1228},[1229,1230,1231],{"id":101,"depth":229,"text":102},{"id":164,"depth":229,"text":167},{"id":1046,"depth":229,"text":1232},"Adding firewall rules to zones:",[1234],"Réseau","\u002Fimages\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta\u002Fa44b82e35f.jpg",null,"2013-09-15","Firewall zones set the foundation for a security policy. Vyatta will group your network into different zones.","md",{},"\u002Fen\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta",{"title":5,"description":1238},"configuration-zone-pare-feu-avec-vyatta","en\u002Fblog\u002Fconfiguration-zone-pare-feu-avec-vyatta","0WdSEt3eW6rzdqYNsrCr1KiqRHwzW5mjvzTwKl6Phg8",[1247,1253,1260,1266,1272,1279,1236,1236],{"title":1248,"path":1249,"stem":1250,"date":1251,"cover":1252,"categories":1236,"children":-1},"GhettoVCB, the Free Backup Solution for VMware ESXi","\u002Fen\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","en\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","2013-10-08","\u002Fimages\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi\u002Fd8c6089e77.png",{"title":1254,"path":1255,"stem":1256,"date":1257,"cover":1258,"categories":1259,"children":-1},"Configuring VPN Remote Access with Vyatta","\u002Fen\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","en\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","2013-10-03","\u002Fimages\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta\u002Fa44b82e35f.jpg",[1234],{"title":1261,"path":1262,"stem":1263,"date":1264,"cover":1265,"categories":1236,"children":-1},"Arch Linux Distribution: Customization","\u002Fen\u002Fblog\u002Fdistribution-arch-linux-personnalisation","en\u002Fblog\u002Fdistribution-arch-linux-personnalisation","2013-09-25","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-personnalisation\u002F68a1cb957a.png",{"title":1267,"path":1268,"stem":1269,"date":1270,"cover":1271,"categories":1236,"children":-1},"Arch Linux ARM Distribution: Raspberry Pi","\u002Fen\u002Fblog\u002Fdistribution-arch-linux-arm-raspberry","en\u002Fblog\u002Fdistribution-arch-linux-arm-raspberry","2013-09-22","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-arm-raspberry\u002Fb426e4efea.png",{"title":1273,"path":1274,"stem":1275,"date":1276,"cover":1277,"categories":1278,"children":-1},"Basic Configuration on Vyatta","\u002Fen\u002Fblog\u002Fconfiguration-base-sous-vyatta","en\u002Fblog\u002Fconfiguration-base-sous-vyatta","2013-09-08","\u002Fimages\u002Fblog\u002Fconfiguration-base-sous-vyatta\u002F8a3fd53886.png",[1234],{"title":1280,"path":1281,"stem":1282,"date":1283,"cover":1284,"categories":1236,"children":-1},"Arch Linux Distribution: Installation","\u002Fen\u002Fblog\u002Fdistribution-arch-linux-installation","en\u002Fblog\u002Fdistribution-arch-linux-installation","2013-09-01","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-installation\u002F68a1cb957a.png",[],1786644893635]