firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add support for 'Skype for Business Online' and 'Microsoft Teams'.

Browse Source
This commit is contained in:
Christoph
2022-02-02 21:24:53 +01:00
parent 0f2676eea6
commit 577eaa27c4
6 changed files with 184 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
ip6t-firewall-gateway
View File

@ -3120,6 +3120,7 @@ if $allow_outbound_streaming \
|| $allow_echo360_video_streaming \
|| $allow_bigbluebutton_video_conference_out \
|| $allow_webex_video_conference_out \
|| $allow_ms_skype_teams_out \
|| $allow_zoom_video_conference_out \
|| $allow_jitsi_video_conference_out \
|| $allow_alfaview_video_conference_out \
@ -3206,6 +3207,52 @@ else
fi
# ---
# - Skype for Business Online und Microsoft Teams
# ---
echononl "\t\tSkype for Business Online und Microsoft Teams"
if $allow_ms_skype_teams_out \
&& ( [[ ${#ms_skype_teams_udp6_host_arr[@]} -gt 0 ]] && [[ ${#ms_skype_teams_udp_port_arr[@]} -gt 0 ]] ) \
|| [[ ${#ms_skype_teams_tcp_port_arr[@]} -gt 0 ]] ; then
for _dev in ${ext_if_arr[@]} ; do
if [[ ${#ms_skype_teams_udp6_host_arr[@]} -gt 0 ]] && [[ ${#ms_skype_teams_udp_port_arr[@]} -gt 0 ]] ; then
for _host in ${ms_skype_teams_udp6_host_arr[@]} ; do
for _port in ${ms_skype_teams_udp_port_arr[@]} ; do
$ip6t -A OUTPUT -o $_dev -p udp -d $_host -dport $_port -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p udp -d $_host -dport $_port -m conntrack --ctstate NEW -j ACCEPT
fi
done
done
fi
if [[ ${#ms_skype_teams_tcp_port_arr[@]} -gt 0 ]] ; then
for _port in ${ms_skype_teams_tcp_port_arr[@]} ; do
$ip6t -A OUTPUT -o $_dev -p udp -d $_host -dport $_port -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p udp -d $_host -dport $_port -m conntrack --ctstate NEW -j ACCEPT
fi
done
fi
done # for _dev in ${ext_if_arr[@]} ; do
echo_done
else
echo_skipped
fi
# ---
# - Webex Meeting Video Conference Service out only
# ---