浏览代码

Move firewall functions to their logical homes

Bob Mottram 8 年前
父节点
当前提交
66bdd41ec1

+ 15
- 0
src/freedombone-utils-avahi 查看文件

126
     mark_completed $FUNCNAME
126
     mark_completed $FUNCNAME
127
 }
127
 }
128
 
128
 
129
+function configure_firewall_for_avahi {
130
+    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
131
+        return
132
+    fi
133
+    iptables -A INPUT -p tcp --dport 548 -j ACCEPT
134
+    iptables -A INPUT -p udp --dport 548 -j ACCEPT
135
+    iptables -A INPUT -p tcp --dport 5353 -j ACCEPT
136
+    iptables -A INPUT -p udp --dport 5353 -j ACCEPT
137
+    iptables -A INPUT -p tcp --dport 5354 -j ACCEPT
138
+    iptables -A INPUT -p udp --dport 5354 -j ACCEPT
139
+    function_check save_firewall_settings
140
+    save_firewall_settings
141
+    mark_completed $FUNCNAME
142
+}
143
+
129
 # NOTE: deliberately there is no "exit 0"
144
 # NOTE: deliberately there is no "exit 0"

+ 14
- 0
src/freedombone-utils-dns 查看文件

203
     mark_completed $FUNCNAME
203
     mark_completed $FUNCNAME
204
 }
204
 }
205
 
205
 
206
+function configure_firewall_for_dns {
207
+    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
208
+        return
209
+    fi
210
+    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
211
+        # docker does its own firewalling
212
+        return
213
+    fi
214
+    iptables -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
215
+    function_check save_firewall_settings
216
+    save_firewall_settings
217
+    mark_completed $FUNCNAME
218
+}
219
+
206
 # NOTE: deliberately no exit 0
220
 # NOTE: deliberately no exit 0

+ 0
- 91
src/freedombone-utils-firewall 查看文件

118
     mark_completed $FUNCNAME
118
     mark_completed $FUNCNAME
119
 }
119
 }
120
 
120
 
121
-function configure_firewall_for_avahi {
122
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
123
-        return
124
-    fi
125
-    iptables -A INPUT -p tcp --dport 548 -j ACCEPT
126
-    iptables -A INPUT -p udp --dport 548 -j ACCEPT
127
-    iptables -A INPUT -p tcp --dport 5353 -j ACCEPT
128
-    iptables -A INPUT -p udp --dport 5353 -j ACCEPT
129
-    iptables -A INPUT -p tcp --dport 5354 -j ACCEPT
130
-    iptables -A INPUT -p udp --dport 5354 -j ACCEPT
131
-    function_check save_firewall_settings
132
-    save_firewall_settings
133
-    mark_completed $FUNCNAME
134
-}
135
-
136
-function configure_firewall_for_dns {
137
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
138
-        return
139
-    fi
140
-    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
141
-        # docker does its own firewalling
142
-        return
143
-    fi
144
-    iptables -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
145
-    function_check save_firewall_settings
146
-    save_firewall_settings
147
-    mark_completed $FUNCNAME
148
-}
149
-
150
-function configure_firewall_for_web_access {
151
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
152
-        return
153
-    fi
154
-    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
155
-        # docker does its own firewalling
156
-        return
157
-    fi
158
-    if [[ $ONION_ONLY != "no" ]]; then
159
-        return
160
-    fi
161
-    firewall_remove 80 tcp
162
-    firewall_remove 443 tcp
163
-    mark_completed $FUNCNAME
164
-}
165
-
166
-function configure_firewall_for_web_server {
167
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
168
-        return
169
-    fi
170
-    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
171
-        # docker does its own firewalling
172
-        return
173
-    fi
174
-    if [[ $ONION_ONLY != "no" ]]; then
175
-        return
176
-    fi
177
-
178
-    firewall_add HTTP 80 tcp
179
-    firewall_add HTTPS 443 tcp
180
-    mark_completed $FUNCNAME
181
-}
182
-
183
-function configure_firewall_for_ssh {
184
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
185
-        return
186
-    fi
187
-    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
188
-        # docker does its own firewalling
189
-        return
190
-    fi
191
-
192
-    firewall_add SSH ${SSH_PORT} tcp
193
-    mark_completed $FUNCNAME
194
-}
195
-
196
-function configure_firewall_for_git {
197
-    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
198
-        return
199
-    fi
200
-    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
201
-        # docker does its own firewalling
202
-        return
203
-    fi
204
-    if [[ $ONION_ONLY != "no" ]]; then
205
-        return
206
-    fi
207
-
208
-    firewall_add Git 9418 tcp
209
-    mark_completed $FUNCNAME
210
-}
211
-
212
 function configure_internet_protocol {
121
 function configure_internet_protocol {
213
     if [[ $(is_completed $FUNCNAME) == "1" ]]; then
122
     if [[ $(is_completed $FUNCNAME) == "1" ]]; then
214
         return
123
         return

+ 16
- 0
src/freedombone-utils-git 查看文件

136
     fi
136
     fi
137
 }
137
 }
138
 
138
 
139
+function configure_firewall_for_git {
140
+    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
141
+        return
142
+    fi
143
+    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
144
+        # docker does its own firewalling
145
+        return
146
+    fi
147
+    if [[ $ONION_ONLY != "no" ]]; then
148
+        return
149
+    fi
150
+
151
+    firewall_add Git 9418 tcp
152
+    mark_completed $FUNCNAME
153
+}
154
+
139
 # NOTE: deliberately no exit 0
155
 # NOTE: deliberately no exit 0

+ 13
- 0
src/freedombone-utils-ssh 查看文件

139
     mark_completed $FUNCNAME
139
     mark_completed $FUNCNAME
140
 }
140
 }
141
 
141
 
142
+function configure_firewall_for_ssh {
143
+    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
144
+        return
145
+    fi
146
+    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
147
+        # docker does its own firewalling
148
+        return
149
+    fi
150
+
151
+    firewall_add SSH ${SSH_PORT} tcp
152
+    mark_completed $FUNCNAME
153
+}
154
+
142
 # NOTE: deliberately no exit 0
155
 # NOTE: deliberately no exit 0

+ 16
- 0
src/freedombone-utils-web 查看文件

598
     fi
598
     fi
599
 }
599
 }
600
 
600
 
601
+function configure_firewall_for_web_access {
602
+    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
603
+        return
604
+    fi
605
+    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
606
+        # docker does its own firewalling
607
+        return
608
+    fi
609
+    if [[ $ONION_ONLY != "no" ]]; then
610
+        return
611
+    fi
612
+    firewall_add HTTP 80 tcp
613
+    firewall_add HTTPS 443 tcp
614
+    mark_completed $FUNCNAME
615
+}
616
+
601
 # NOTE: deliberately no exit 0
617
 # NOTE: deliberately no exit 0