firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adjust BigBlueButton TCP Ports out.

Browse Source
This commit is contained in:
Christoph 2021-06-07 11:31:30 +02:00
parent 8faab2827a
commit 5d8ef9a8f5
4 changed files with 41 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
conf/default_ports.conf
View File

@ -137,7 +137,7 @@ standard_unifi_udp_ctrl_out_ports="443,3478"
# - BigBlueButton Video Conference Service # - BigBlueButton Video Conference Service
# - # -
standard_bigbluebutton_tcp_ports="$standard_http_ports" standard_bigbluebutton_tcp_ports="$standard_http_ports,5066,7443"
standard_bigbluebutton_udp_port_range="16384:32768" standard_bigbluebutton_udp_port_range="16384:32768"
# - Webex Meeting # - Webex Meeting

33
conf/post_decalrations.conf
View File

@ -5,6 +5,18 @@
# --- Define Arrays # --- Define Arrays
# ----------- # -----------
# ---
# - Standard http ports
# ---
declare -a standard_http_port_arr
CUR_IFS="$IFS"
IFS=',' ; for _port in $standard_http_ports ; do
standard_http_port_arr+=("${_port}")
done
IFS="$CUR_IFS"
# --- # ---
# - Masquerade TCP Connections # - Masquerade TCP Connections
# --- # ---
@ -566,6 +578,27 @@ for _port in $ldap_tcp_ports ; do
ldap_tcp_port_arr+=("$_port") ldap_tcp_port_arr+=("$_port")
done done
# ---
# - BigBlueButton Video Conference - adjust 'bigbluebutton_tcp_ports'
# ---
declare -a bigbluebutton_tcp_port_arr
CUR_IFS="$IFS"
_tmp_tcp_ports="$bigbluebutton_tcp_ports"
bigbluebutton_tcp_ports=""
declare -i count=0
IFS=',' ; for _port in $_tmp_tcp_ports ; do
if containsElement "${_port}" "${standard_http_port_arr[@]}" ; then
continue
fi
if [[ $count -eq 0 ]]; then
bigbluebutton_tcp_ports="$_port"
else
bigbluebutton_tcp_ports="${bigbluebutton_tcp_ports},${_port}"
fi
((count++))
done
IFS="$CUR_IFS"
# --- # ---
# - IPMI # - IPMI
# --- # ---

5
ip6t-firewall-gateway
View File

@ -2994,13 +2994,16 @@ echononl "\t\tBigBlueButton Video Conference Service out only"
if $allow_bigbluebutton_video_conference_out ; then if $allow_bigbluebutton_video_conference_out ; then
for _dev in ${ext_if_arr[@]} ; do for _dev in ${ext_if_arr[@]} ; do
if [[ "$bigbluebutton_tcp_ports" != "$standard_http_ports" ]] ; then if [[ -n $bigbluebutton_tcp_ports ]] ; then
$ip6t -A OUTPUT -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT $ip6t -A OUTPUT -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT $ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi fi
fi fi
$ip6t -A OUTPUT -o $_dev -p udp -m multiport --dports $bigbluebutton_udp_ports -m conntrack --ctstate NEW -j ACCEPT $ip6t -A OUTPUT -o $_dev -p udp -m multiport --dports $bigbluebutton_udp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then

4
ipt-firewall-gateway
View File

@ -3740,8 +3740,10 @@ echononl "\t\tBigBlueButton Video Conference Service out only"
if $allow_bigbluebutton_video_conference_out ; then if $allow_bigbluebutton_video_conference_out ; then
for _dev in ${ext_if_arr[@]} ; do for _dev in ${ext_if_arr[@]} ; do
if [[ "$bigbluebutton_tcp_ports" != "$standard_http_ports" ]] ; then if [[ -n $bigbluebutton_tcp_ports ]] ; then
$ipt -A OUTPUT -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT $ipt -A OUTPUT -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then
$ipt -A FORWARD -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT $ipt -A FORWARD -o $_dev -p tcp -m multiport --dports $bigbluebutton_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi fi