Przeglądaj źródła

In onion only mode don't open ports

Bob Mottram 9 lat temu
rodzic
commit
e7d02f6091
1 zmienionych plików z 33 dodań i 0 usunięć
  1. 33
    0
      src/freedombone

+ 33
- 0
src/freedombone Wyświetl plik

3910
     if grep -Fxq "configure_firewall_for_voip" $COMPLETION_FILE; then
3910
     if grep -Fxq "configure_firewall_for_voip" $COMPLETION_FILE; then
3911
         return
3911
         return
3912
     fi
3912
     fi
3913
+    if [[ $ONION_ONLY != "no" ]]; then
3914
+        return
3915
+    fi
3913
     iptables -A INPUT -p udp --dport $VOIP_PORT -j ACCEPT
3916
     iptables -A INPUT -p udp --dport $VOIP_PORT -j ACCEPT
3914
     iptables -A INPUT -p tcp --dport $VOIP_PORT -j ACCEPT
3917
     iptables -A INPUT -p tcp --dport $VOIP_PORT -j ACCEPT
3915
     save_firewall_settings
3918
     save_firewall_settings
3923
     if grep -Fxq "configure_firewall_for_sip" $COMPLETION_FILE; then
3926
     if grep -Fxq "configure_firewall_for_sip" $COMPLETION_FILE; then
3924
         return
3927
         return
3925
     fi
3928
     fi
3929
+    if [[ $ONION_ONLY != "no" ]]; then
3930
+        return
3931
+    fi
3926
     iptables -A INPUT -p udp --dport $SIP_PORT -j ACCEPT
3932
     iptables -A INPUT -p udp --dport $SIP_PORT -j ACCEPT
3927
     iptables -A INPUT -p tcp --dport $SIP_PORT -j ACCEPT
3933
     iptables -A INPUT -p tcp --dport $SIP_PORT -j ACCEPT
3928
     save_firewall_settings
3934
     save_firewall_settings
3936
     if grep -Fxq "configure_firewall_for_ipfs" $COMPLETION_FILE; then
3942
     if grep -Fxq "configure_firewall_for_ipfs" $COMPLETION_FILE; then
3937
         return
3943
         return
3938
     fi
3944
     fi
3945
+    if [[ $ONION_ONLY != "no" ]]; then
3946
+        return
3947
+    fi
3939
     iptables -A INPUT -p tcp --dport $IPFS_PORT -j ACCEPT
3948
     iptables -A INPUT -p tcp --dport $IPFS_PORT -j ACCEPT
3940
     save_firewall_settings
3949
     save_firewall_settings
3941
     echo 'configure_firewall_for_ipfs' >> $COMPLETION_FILE
3950
     echo 'configure_firewall_for_ipfs' >> $COMPLETION_FILE
4049
         # docker does its own firewalling
4058
         # docker does its own firewalling
4050
         return
4059
         return
4051
     fi
4060
     fi
4061
+    if [[ $ONION_ONLY != "no" ]]; then
4062
+        return
4063
+    fi
4052
     iptables -A INPUT -p tcp --dport 5222:5223 -j ACCEPT
4064
     iptables -A INPUT -p tcp --dport 5222:5223 -j ACCEPT
4053
     iptables -A INPUT -p tcp --dport 5269 -j ACCEPT
4065
     iptables -A INPUT -p tcp --dport 5269 -j ACCEPT
4054
     iptables -A INPUT -p tcp --dport 5280:5281 -j ACCEPT
4066
     iptables -A INPUT -p tcp --dport 5280:5281 -j ACCEPT
4067
         # docker does its own firewalling
4079
         # docker does its own firewalling
4068
         return
4080
         return
4069
     fi
4081
     fi
4082
+    if [[ $ONION_ONLY != "no" ]]; then
4083
+        return
4084
+    fi
4070
     iptables -A INPUT -p tcp --dport $IRC_PORT  -j ACCEPT
4085
     iptables -A INPUT -p tcp --dport $IRC_PORT  -j ACCEPT
4071
     iptables -I INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
4086
     iptables -I INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
4072
     save_firewall_settings
4087
     save_firewall_settings
4081
         # docker does its own firewalling
4096
         # docker does its own firewalling
4082
         return
4097
         return
4083
     fi
4098
     fi
4099
+    if [[ $ONION_ONLY != "no" ]]; then
4100
+        return
4101
+    fi
4084
     iptables -I INPUT -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
4102
     iptables -I INPUT -p tcp --dport 1024:65535 --sport 20:21 -j ACCEPT
4085
     save_firewall_settings
4103
     save_firewall_settings
4086
     echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
4104
     echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
4094
         # docker does its own firewalling
4112
         # docker does its own firewalling
4095
         return
4113
         return
4096
     fi
4114
     fi
4115
+    if [[ $ONION_ONLY != "no" ]]; then
4116
+        return
4117
+    fi
4097
     iptables -A INPUT -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
4118
     iptables -A INPUT -p tcp --dport 32768:61000 --sport 80 -j ACCEPT
4098
     iptables -A INPUT -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
4119
     iptables -A INPUT -p tcp --dport 32768:61000 --sport 443 -j ACCEPT
4099
     save_firewall_settings
4120
     save_firewall_settings
4108
         # docker does its own firewalling
4129
         # docker does its own firewalling
4109
         return
4130
         return
4110
     fi
4131
     fi
4132
+    if [[ $ONION_ONLY != "no" ]]; then
4133
+        return
4134
+    fi
4111
     iptables -A INPUT -p tcp --dport 80 -j ACCEPT
4135
     iptables -A INPUT -p tcp --dport 80 -j ACCEPT
4112
     iptables -A INPUT -p tcp --dport 443 -j ACCEPT
4136
     iptables -A INPUT -p tcp --dport 443 -j ACCEPT
4113
     save_firewall_settings
4137
     save_firewall_settings
4122
         # docker does its own firewalling
4146
         # docker does its own firewalling
4123
         return
4147
         return
4124
     fi
4148
     fi
4149
+    if [[ $ONION_ONLY != "no" ]]; then
4150
+        return
4151
+    fi
4125
     iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT
4152
     iptables -A INPUT -p tcp --dport $TOX_PORT -j ACCEPT
4126
     save_firewall_settings
4153
     save_firewall_settings
4127
     echo 'configure_firewall_for_tox' >> $COMPLETION_FILE
4154
     echo 'configure_firewall_for_tox' >> $COMPLETION_FILE
4149
         # docker does its own firewalling
4176
         # docker does its own firewalling
4150
         return
4177
         return
4151
     fi
4178
     fi
4179
+    if [[ $ONION_ONLY != "no" ]]; then
4180
+        return
4181
+    fi
4152
     iptables -A INPUT -p tcp --dport 9418 -j ACCEPT
4182
     iptables -A INPUT -p tcp --dport 9418 -j ACCEPT
4153
     save_firewall_settings
4183
     save_firewall_settings
4154
     echo 'configure_firewall_for_git' >> $COMPLETION_FILE
4184
     echo 'configure_firewall_for_git' >> $COMPLETION_FILE
4165
         # docker does its own firewalling
4195
         # docker does its own firewalling
4166
         return
4196
         return
4167
     fi
4197
     fi
4198
+    if [[ $ONION_ONLY != "no" ]]; then
4199
+        return
4200
+    fi
4168
     iptables -A INPUT -p tcp --dport 25 -j ACCEPT
4201
     iptables -A INPUT -p tcp --dport 25 -j ACCEPT
4169
     iptables -A INPUT -p tcp --dport 587 -j ACCEPT
4202
     iptables -A INPUT -p tcp --dport 587 -j ACCEPT
4170
     iptables -A INPUT -p tcp --dport 465 -j ACCEPT
4203
     iptables -A INPUT -p tcp --dport 465 -j ACCEPT