Przeglądaj źródła

enable and disable avahi ports

Bob Mottram 9 lat temu
rodzic
commit
66b96ebf79
1 zmienionych plików z 12 dodań i 2 usunięć
  1. 12
    2
      src/freedombone-client

+ 12
- 2
src/freedombone-client Wyświetl plik

@@ -263,7 +263,12 @@ function mesh_batman {
263 263
   echo '        ifconfig $BRIDGE up' >> $batman_script
264 264
   echo '    fi' >> $batman_script
265 265
   echo '' >> $batman_script
266
-  echo '    iptables -A INPUT -i $IFACE -p udp --dport 5353 -j ACCEPT' >> $batman_script
266
+  echo '    iptables -A INPUT -p tcp -m state -m tcp --dport 548 --state NEW -j ACCEPT' >> $batman_script
267
+  echo '    iptables -A INPUT -p tcp -m state -m udp --dport 548 --state NEW -j ACCEPT' >> $batman_script
268
+  echo '    iptables -A INPUT -p tcp -m state -m tcp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
269
+  echo '    iptables -A INPUT -p tcp -m state -m udp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
270
+  echo '    iptables -A INPUT -p tcp -m state -m tcp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
271
+  echo '    iptables -A INPUT -p tcp -m state -m udp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
267 272
   echo '' >> $batman_script
268 273
   echo '    if [ -f /bin/systemctl ]; then' >> $batman_script
269 274
   echo '        systemctl restart avahi-daemon' >> $batman_script
@@ -295,7 +300,12 @@ function mesh_batman {
295 300
   echo '    ifconfig $IFACE down' >> $batman_script
296 301
   echo '    iwconfig $IFACE mode managed' >> $batman_script
297 302
   echo '' >> $batman_script
298
-  echo '    iptables -D INPUT -i $IFACE -p udp --dport 5353 -j ACCEPT' >> $batman_script
303
+  echo '    iptables -D INPUT -p tcp -m state -m tcp --dport 548 --state NEW -j ACCEPT' >> $batman_script
304
+  echo '    iptables -D INPUT -p tcp -m state -m udp --dport 548 --state NEW -j ACCEPT' >> $batman_script
305
+  echo '    iptables -D INPUT -p tcp -m state -m tcp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
306
+  echo '    iptables -D INPUT -p tcp -m state -m udp --dport 5353 --state NEW -j ACCEPT' >> $batman_script
307
+  echo '    iptables -D INPUT -p tcp -m state -m tcp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
308
+  echo '    iptables -D INPUT -p tcp -m state -m udp --dport 5354 --state NEW -j ACCEPT' >> $batman_script
299 309
   echo '' >> $batman_script
300 310
   echo '    if [ -f /bin/systemctl ]; then' >> $batman_script
301 311
   echo '        systemctl restart network-manager' >> $batman_script