Browse Source

Mesh firewall for babel protocol

Bob Mottram 7 years ago
parent
commit
246ecc6c96
2 changed files with 16 additions and 1 deletions
  1. 4
    0
      src/freedombone-mesh-install
  2. 12
    1
      src/freedombone-utils-mesh

+ 4
- 0
src/freedombone-mesh-install View File

@@ -233,6 +233,10 @@ function mesh_firewall {
233 233
     echo 'ip6tables -A INPUT -p udp --dport 269 -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
234 234
     echo 'iptables -A INPUT -p tcp --dport 138 -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
235 235
     echo 'ip6tables -A INPUT -p tcp --dport 138 -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
236
+
237
+    echo '# Babel' >> $MESH_FIREWALL_SCRIPT
238
+    echo 'iptables -A INPUT -p udp --dport 6696 -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
239
+    echo 'ip6tables -A INPUT -p udp --dport 6696 -j ACCEPT' >> $MESH_FIREWALL_SCRIPT
236 240
     chmod +x $MESH_FIREWALL_SCRIPT
237 241
 
238 242
     echo '[Unit]' > $FIREWALL_FILENAME

+ 12
- 1
src/freedombone-utils-mesh View File

@@ -220,6 +220,9 @@ function enable_mesh_firewall {
220 220
     # OLSR2/MANET
221 221
     iptables -A INPUT -p udp --dport 269 -j ACCEPT
222 222
     iptables -A INPUT -p tcp --dport 138 -j ACCEPT
223
+    # Babel
224
+    iptables -A INPUT -p udp --dport 6696 -j ACCEPT
225
+    ip6tables -A INPUT -p udp --dport 6696 -j ACCEPT
223 226
 
224 227
 
225 228
     ip6tables -A INPUT -p ipv6-icmp -j ACCEPT
@@ -253,6 +256,9 @@ function enable_mesh_firewall {
253 256
     # OLSR2/MANET
254 257
     ip6tables -A INPUT -p udp --dport 269 -j ACCEPT
255 258
     ip6tables -A INPUT -p tcp --dport 138 -j ACCEPT
259
+    # Babel
260
+    iptables -A INPUT -p udp --dport 6696 -j ACCEPT
261
+    ip6tables -A INPUT -p udp --dport 6696 -j ACCEPT
256 262
 
257 263
 
258 264
     # vpn over the internet
@@ -304,6 +310,9 @@ function disable_mesh_firewall {
304 310
     # OLSR2/MANET
305 311
     iptables -D INPUT -p udp --dport 269 -j ACCEPT
306 312
     iptables -D INPUT -p tcp --dport 138 -j ACCEPT
313
+    # Babel
314
+    iptables -D INPUT -p udp --dport 6696 -j ACCEPT
315
+    ip6tables -D INPUT -p udp --dport 6696 -j ACCEPT
307 316
 
308 317
 
309 318
     ip6tables -D INPUT -p tcp --dport $TRACKER_PORT -j ACCEPT
@@ -336,7 +345,9 @@ function disable_mesh_firewall {
336 345
     # OLSR2/MANET
337 346
     ip6tables -D INPUT -p udp --dport 269 -j ACCEPT
338 347
     ip6tables -D INPUT -p tcp --dport 138 -j ACCEPT
339
-
348
+    # Babel
349
+    iptables -D INPUT -p udp --dport 6696 -j ACCEPT
350
+    ip6tables -D INPUT -p udp --dport 6696 -j ACCEPT
340 351
 
341 352
     # vpn over the internet
342 353
     iptables -D INPUT -p tcp --dport 653 -j ACCEPT