Switch era to 3zones + add cups rule

eole/era/2zones-amonecole-cuques.xml

 <?xml version="1.0" encoding="UTF-8" ?>
 
-<firewall name="/usr/share/era/modeles/2zones-amonecole-cuques.xml" model="/usr/share/era/modeles/2zones-amonecole.xml" version="2.42">
+<firewall name="/usr/share/era/modeles/2zones-amonecole-cuques.xml" model="/usr/share/era/modeles/3zones.xml" version="2.42">
     <zones>
     </zones>
     <include>
@@ -37,7 +37,17 @@
             <montantes default_policy="0">
                  <directive service="registry" priority="41" action="2" attrs="0" src_inv="0" dest_inv="0" serv_inv="0" libelle="pas de description" ipsec="0" accept="0">
                     <source name="pedago"/>
-                    <destination name="partage_eth1"/>
+                    <destination name="partage_eth2"/>
+                </directive>
+            </montantes>
+            <descendantes default_policy="1">
+            </descendantes>
+        </flux>
+         <flux zoneA="bastion" zoneB="pedago">
+            <montantes default_policy="0">
+                 <directive service="cups" priority="42" action="2" attrs="0" src_inv="0" dest_inv="0" serv_inv="0" libelle="pas de description" ipsec="0" accept="0">
+                    <source name="pedago"/>
+                    <destination name="partage_eth2"/>
                 </directive>
             </montantes>
             <descendantes default_policy="1">