firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add Video Conferencing System 'alfaview'.

Browse Source
This commit is contained in:
Christoph 2020-06-15 13:52:10 +02:00
parent 32048f3a35
commit 0a2aba1f29
5 changed files with 101 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
conf/default_ports.conf
View File

@ -64,6 +64,14 @@ standard_jitsi_udp_port_range="10000:20000"
standard_turn_service_ports="3478:3479,5349:5350"
standard_turn_service_udp_ports="49152:65535"
# - alfaview - Video Conferencing Systems
# -
# - Note
# - also tcp ports http/https needed to be open
# -
standard_alfaview_service_tcp_ports="5380:5390"
standard_alfaview_service_udp_ports="5380:5390"
# -------------
# --- Predefined Ports
# -------------

11
conf/main_ipv4.conf.sample
View File

@ -842,6 +842,16 @@ jitsi_tcp_ports="$standard_jitsi_tcp_ports"
jitsi_udp_port_range="$standard_jitsi_udp_port_range"
# ======
# - alfaview - Video Conferencing Systems
# ======
# - alfaview Service Ports
# -
alfaview_tcp_ports="$standard_alfaview_service_tcp_ports"
alfaview_udp_ports="$standard_alfaview_service_udp_ports"
# ======
# - TURN Server (Stun Server) (for Nextcloud 'talk' app)
# ======
@ -1320,6 +1330,7 @@ allow_remote_console_request_out=true
allow_mumble_request_out=true
allow_bigbluebutton_video_conference_out=true
allow_jitsi_video_conference_out=true
allow_alfaview_video_conference_out=true
allow_nc_talk_out=true
allow_samba_requests_out=true

10
conf/main_ipv6.conf.sample
View File

@ -816,6 +816,16 @@ jitsi_tcp_ports="$standard_jitsi_tcp_ports"
jitsi_udp_port_range="$standard_jitsi_udp_port_range"
# ======
# - alfaview - Video Conferencing Systems
# ======
# - alfaview Service Ports
# -
alfaview_tcp_ports="$standard_alfaview_service_tcp_ports"
alfaview_udp_ports="$standard_alfaview_service_udp_ports"
# ======
# - TURN Server (Stun Server) (for Nextcloud 'talk' app)
# ======

38
ip6t-firewall-gateway
View File

@ -2864,7 +2864,7 @@ fi
echononl "\t\tBigBlueButton Video Conference Service out only"
if $allow_jitsi_video_conference_out ; then
if $allow_bigbluebutton_video_conference_out ; then
for _dev in ${ext_if_arr[@]} ; do
if [[ "$bigbluebutton_tcp_ports" != "$standard_http_ports" ]] ; then
@ -2916,6 +2916,42 @@ else
fi
# ---
# - alfaview - Video Conferencing Systems
# ---
echononl "\t\talfaview - Video Conferencing Systems Service out only"
if $allow_alfaview_video_conference_out && ! $permit_local_net_to_inet ; then
for _dev in ${ext_if_arr[@]} ; do
# alfaview is a browser application
#
if ! $allow_http_request_out ; then
$ip6t -A OUTPUT -o $_dev -p tcp -m multiport --dports $standard_http_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $standard_http_ports -m conntrack --ctstate NEW -j ACCEPT
fi
fi
$ip6t -A OUTPUT -o $_dev -p tcp -m multiport --dports $alfaview_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $alfaview_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
$ip6t -A OUTPUT -o $_dev -p udp -m multiport --dports $alfaview_udp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ip6t -A FORWARD -o $_dev -p udp -m multiport --dports $alfaview_udp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - TURN Server (Stun Server) (for Nextcloud 'talk' app)
# ---

35
ipt-firewall-gateway
View File

@ -3626,6 +3626,41 @@ else
fi
# ---
# - alfaview - Video Conferencing Systems
# ---
echononl "\t\talfaview - Video Conferencing Systems Service out only"
if $allow_alfaview_video_conference_out && ! $permit_local_net_to_inet ; then
for _dev in ${ext_if_arr[@]} ; do
# alfaview is a browser application
#
if ! $allow_http_request_out ; then
$ipt -A OUTPUT -o $_dev -p tcp -m multiport --dports $standard_http_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ipt -A FORWARD -o $_dev -p tcp -m multiport --dports $standard_http_ports -m conntrack --ctstate NEW -j ACCEPT
fi
fi
$ipt -A OUTPUT -o $_dev -p tcp -m multiport --dports $alfaview_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ipt -A FORWARD -o $_dev -p tcp -m multiport --dports $alfaview_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
$ipt -A OUTPUT -o $_dev -p udp -m multiport --dports $alfaview_udp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding ; then
$ipt -A FORWARD -o $_dev -p udp -m multiport --dports $alfaview_udp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - TURN Server (Stun Server) (for Nextcloud 'talk' app)
# ---