Allow icmp for mesh variant

src/freedombone

       fi
   fi
 
-  ip6tables -A INPUT -i eth0 -p udp --dport $CJDNS_PORT -j ACCEPT
-  ip6tables -A INPUT -i eth0 -p tcp --dport $CJDNS_PORT -j ACCEPT
+  ip6tables -A INPUT -p udp --dport $CJDNS_PORT -j ACCEPT
+  ip6tables -A INPUT -p tcp --dport $CJDNS_PORT -j ACCEPT
   save_firewall_settings
 
   if ! grep -q "Mesh Networking (cjdns)" /home/$MY_USERNAME/README; then
   chmod +x /etc/network/if-up.d/iptables
 }
 
+function configure_firewall_ping {
+  if grep -Fxq "configure_firewall_ping" $COMPLETION_FILE; then
+      return
+  fi
+  # Only allow ping for mesh installs
+  if [[ $SYSTEM_TYPE != "$VARIANT_MESH" ]]; then
+      return
+  fi
+  iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
+  iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
+  save_firewall_settings
+  echo 'configure_firewall_ping' >> $COMPLETION_FILE
+}
+
 function configure_firewall_for_voip {
   if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" ]]; then
       return
   if grep -Fxq "configure_firewall_for_voip" $COMPLETION_FILE; then
       return
   fi
-  iptables -A INPUT -i eth0 -p udp --dport $VOIP_PORT -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport $VOIP_PORT -j ACCEPT
+  iptables -A INPUT -p udp --dport $VOIP_PORT -j ACCEPT
+  iptables -A INPUT -p tcp --dport $VOIP_PORT -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_voip' >> $COMPLETION_FILE
 }
   if [[ $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CHAT" || $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" ]]; then
       return
   fi
-  iptables -A INPUT -i eth0 -p udp --dport 1900 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 8200 -j ACCEPT
+  iptables -A INPUT -p udp --dport 1900 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 8200 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_dlna' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
+  iptables -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_dns' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 5222:5223 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 5269 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 5280:5281 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 5222:5223 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 5269 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 5280:5281 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_xmpp' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport $IRC_PORT  -j ACCEPT
-  iptables -I INPUT -i eth0 -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 9999 -j ACCEPT
+  iptables -A INPUT -p tcp --dport $IRC_PORT  -j ACCEPT
+  iptables -I INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
+  iptables -A INPUT -p tcp --dport 9999 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_irc' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_web_access' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 80 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 443 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_web_server' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport $TOX_PORT -j ACCEPT
+  iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_tox' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport $SSH_PORT -j ACCEPT
+  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
+  iptables -A INPUT -p tcp --dport $SSH_PORT -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_ssh' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 9418 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 9418 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_git' >> $COMPLETION_FILE
 }
       # docker does its own firewalling
       return
   fi
-  iptables -A INPUT -i eth0 -p tcp --dport 25 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 587 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 465 -j ACCEPT
-  iptables -A INPUT -i eth0 -p tcp --dport 993 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 25 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 587 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 465 -j ACCEPT
+  iptables -A INPUT -p tcp --dport 993 -j ACCEPT
   save_firewall_settings
   echo 'configure_firewall_for_email' >> $COMPLETION_FILE
 }
   fi
   # Avoid logging the changed database
   sed -i 's|$(TWETC)/tw.pol.*||g' /etc/tripwire/twpol.txt
+  # recreate the configuration
   echo '
 
+' | twadmin --create-cfgfile -S /etc/tripwire/site.key /etc/tripwire/twcfg.txt
+  # reset
+  echo '
+
+
 
 ' | reset-tripwire
 
 install_not_on_BBB
 remove_default_user
 configure_firewall
+configure_firewall_ping
 configure_firewall_for_ssh
 configure_firewall_for_dns
 configure_firewall_for_ftp