firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add support for Epson Network Scanner.

Browse Source
This commit is contained in:
Christoph 2020-07-26 21:08:04 +02:00
parent 0a2aba1f29
commit 5a958fa332
6 changed files with 102 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
conf/default_ports.conf
View File

@ -38,6 +38,17 @@ standard_vpn_port=1194
standard_whois_port=43
standard_xymon_port=1984
# - Brother (brscan)
# -
standard_brother_brscan_port=54921
# - Epson Network Scan
# -
standard_epson_network_scan_port=1865
# - IPsec - Internet Security Association and
# - Key Management Protocol
standard_isakmp_port=500

14
conf/main_ipv4.conf.sample
View File

@ -1151,7 +1151,19 @@ printer_ips=""
# - Blank seoarated list
# -
brother_scanner_ips=""
brscan_port=54921
brscan_port="$standard_brother_brscan_port"
# ======
# - Epson Network Scan
# ======
# - IP Adresses Epson Network Scanner
# -
# - Blank seoarated list
# -
epson_scanner_ips=""
epson_scan_port="$standard_epson_network_scan_port"

13
conf/main_ipv6.conf.sample
View File

@ -1126,7 +1126,18 @@ printer_ips=""
# - Blank seoarated list
# -
brother_scanner_ips=""
brscan_port=54921
brscan_port="$standard_brother_brscan_port"
# ======
# - Epson Network Scan
# ======
# - IP Adresses Epson Network Scanner
# -
# - Blank seoarated list
# -
epson_scanner_ips=""
epson_scan_port="$standard_epson_network_scan_port"

8
conf/post_decalrations.conf
View File

@ -404,6 +404,14 @@ for _ip in $brother_scanner_ips ; do
brother_scanner_ip_arr+=("$_ip")
done
# ---
# - IP Adresses Epson Network Scanner
# ---
declare -a epson_scanner_ip_arr
for _ip in $epson_scanner_ips ; do
epson_scanner_ip_arr+=("$_ip")
done
# ---
# - IP Addresses PCNS Server
# ---

29
ip6t-firewall-gateway
View File

@ -3315,6 +3315,35 @@ else
echo_skipped
fi
echononl "\t\tEpson Network Scanner (Port $epson_scan_port) only between local Networks"
if [[ ${#epson_scanner_ip_arr[@]} -gt 0 ]] \
&& $kernel_forward_between_interfaces \
&& ! $permit_between_local_networks \
&& $allow_scanning_between_local_nets ; then
for _ip in ${epson_scanner_ip_arr[@]} ; do
for _dev in ${local_if_arr[@]} ; do
# - UDP
$ip6t -A FORWARD -i $_dev -p udp -d $_ip --dport $epson_scan_port -m conntrack --ctstate NEW -j ACCEPT
# - TCP
$ip6t -A FORWARD -i $_dev -p tcp -d $_ip --dport $epson_scan_port -m conntrack --ctstate NEW -j ACCEPT
# - Note:
# - If (local) alias interfaces like eth1:0 in use, youe need a further
# - special rule.
# -
if $local_alias_interfaces ; then
$ip6t -A FORWARD -o $_dev -p tcp -d $_ip --dport $epson_scan_port --tcp-flag ACK ACK -j ACCEPT
$ip6t -A FORWARD -o $_dev -p tcp -s $_ip --sport $epson_scan_port --tcp-flag ACK ACK -j ACCEPT
fi
done
done
echo_done
else
echo_skipped
fi

29
ipt-firewall-gateway
View File

@ -4024,6 +4024,35 @@ else
echo_skipped
fi
echononl "\t\tEpson Network Scanner (Port $epson_scan_port) only between local Networks"
if [[ ${#epson_scanner_ip_arr[@]} -gt 0 ]] \
&& $kernel_activate_forwarding \
&& ! $permit_between_local_networks \
&& $allow_scanning_between_local_nets ; then
for _ip in ${epson_scanner_ip_arr[@]} ; do
for _dev in ${local_if_arr[@]} ; do
# - UDP
$ipt -A FORWARD -i $_dev -p udp -d $_ip --dport $epson_scan_port -m conntrack --ctstate NEW -j ACCEPT
# - TCP
$ipt -A FORWARD -i $_dev -p tcp -d $_ip --dport $epson_scan_port -m conntrack --ctstate NEW -j ACCEPT
# - Note:
# - If (local) alias interfaces like eth1:0 in use, youe need a further
# - special rule.
# -
if $local_alias_interfaces ; then
$ipt -A FORWARD -i $_dev -p tcp -d $_ip --dport $epson_scan_port --tcp-flag ACK ACK -j ACCEPT
$ipt -A FORWARD -o $_dev -p tcp -s $_ip --sport $epson_scan_port --tcp-flag ACK ACK -j ACCEPT
fi
done
done
echo_done
else
echo_skipped
fi
# ---
# - Special TCP Ports OUT