firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add support for ZOOM Meetings.

Browse Source
This commit is contained in:
Christoph 2021-06-09 16:38:34 +02:00
parent 75a5c40430
commit 701655c193
6 changed files with 153 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
conf/default_ports.conf
View File

@ -157,6 +157,25 @@ standard_webex_udp_ports="9000"
standard_webex_tcp_fall_back_ports="5004"
# - Zoom Meeting - Video Conference Service
# -
# - TCP 80,443 A ll Zoom Clients and *.zoom.us
# - Meeting Connector
# -
# - TCP 443,8801,8802 All Zoom Clients MeetingConnector.IP
# - MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
# - UDP 3478,3479,8801, All Zoom Clients MeetingConnector.IP
# - 8802 MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
standard_zoom_tcp_ports="80,443,8801,8802"
standard_zoom_udp_port_range="3478,3479,8801,8802 "
# - Jitsi Video Conference Service
# -
standard_jitsi_tcp_ports="$standard_http_ports"

24
conf/main_ipv4.conf.sample
View File

@ -912,6 +912,29 @@ webex_udp_ports="$standard_webex_udp_ports"
webex_tcp_fall_back_ports="$standard_webex_tcp_fall_back_ports"
# ======
# - Zoom Meeting
# ======
# - Zoom Meeting - Video Conference Service
# -
# - TCP 80,443 A ll Zoom Clients and *.zoom.us
# - Meeting Connector
# -
# - TCP 443,8801,8802 All Zoom Clients MeetingConnector.IP
# - MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
# - UDP 3478,3479,8801, All Zoom Clients MeetingConnector.IP
# - 8802 MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
zoom_tcp_ports="$standard_zoom_tcp_ports"
zoom_udp_ports="$standard_zoom_udp_port_range"
# ======
# - Jitsi Video Conference Service
# ======
@ -1496,6 +1519,7 @@ allow_remote_console_request_out=true
allow_mumble_request_out=true
allow_bigbluebutton_video_conference_out=true
allow_webex_video_conference_out=true
allow_zoom_video_conference_out=true
allow_jitsi_video_conference_out=true
allow_alfaview_video_conference_out=true
allow_nc_talk_out=true

24
conf/main_ipv6.conf.sample
View File

@ -883,6 +883,29 @@ webex_udp_ports="$standard_webex_udp_ports"
webex_tcp_fall_back_ports="$standard_webex_tcp_fall_back_ports"
# ======
# - Zoom Meeting
# ======
# - Zoom Meeting - Video Conference Service
# -
# - TCP 80,443 A ll Zoom Clients and *.zoom.us
# - Meeting Connector
# -
# - TCP 443,8801,8802 All Zoom Clients MeetingConnector.IP
# - MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
# - UDP 3478,3479,8801, All Zoom Clients MeetingConnector.IP
# - 8802 MeetingConnector.IP2
# - MeetingConnector2.IP
# - MeetingConnector2.IP2
# -
zoom_tcp_ports="$standard_zoom_tcp_ports"
zoom_udp_ports="$standard_zoom_udp_port_range"
# ======
# - Jitsi Video Conference Service
# ======
@ -1412,6 +1435,7 @@ allow_mumble_request_out=true
allow_alfaview_video_conference_out=true
allow_bigbluebutton_video_conference_out=true
allow_webex_video_conference_out=true
allow_zoom_video_conference_out=true
allow_jitsi_video_conference_out=true
allow_nc_talk_out=true

24
conf/post_decalrations.conf
View File

@ -578,6 +578,7 @@ for _port in $ldap_tcp_ports ; do
ldap_tcp_port_arr+=("$_port")
done
# ---
# - BigBlueButton Video Conference - adjust 'bigbluebutton_tcp_ports'
# ---
@ -599,6 +600,29 @@ IFS=',' ; for _port in $_tmp_tcp_ports ; do
done
IFS="$CUR_IFS"
# ---
# Zoom Meetings - Video Conference - adjust 'zoom_tcp_ports'
# ---
declare -a zoom_tcp_port_arr
CUR_IFS="$IFS"
_tmp_tcp_ports="$zoom_tcp_ports"
zoom_tcp_ports=""
declare -i count=0
IFS=',' ; for _port in $_tmp_tcp_ports ; do
if containsElement "${_port}" "${standard_http_port_arr[@]}" ; then
continue
fi
if [[ $count -eq 0 ]]; then
zoom_tcp_ports="$_port"
else
zoom_tcp_ports="${zoom_tcp_ports},${_port}"
fi
((count++))
done
IFS="$CUR_IFS"
# ---
# - IPMI
# ---

31
ip6t-firewall-gateway
View File

@ -3053,6 +3053,37 @@ else
fi
# ---
# - Zoom Meeting - Video Conference Service out only
# ---
echononl "\t\tZoom Meeting - Video Conference Service out only"
if $allow_zoom_video_conference_out ; then
for _dev in ${ext_if_arr[@]} ; do
if [[ -n $zoom_tcp_ports ]] ; then
$ip6t -A OUTPUT -o $_dev -p tcp -m multiport --dports $zoom_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $zoom_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
fi
$ip6t -A OUTPUT -o $_dev -p udp -m multiport --dports $zoom_udp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p udp -m multiport --dports $zoom_udp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - Jitsi Video Conference Service out only

31
ipt-firewall-gateway
View File

@ -3798,6 +3798,37 @@ else
fi
# ---
# - Zoom Meeting - Video Conference Service out only
# ---
echononl "\t\tZoom Meeting - Video Conference Service out only"
if $allow_zoom_video_conference_out ; then
for _dev in ${ext_if_arr[@]} ; do
if [[ -n $zoom_tcp_ports ]] ; then
$ipt -A OUTPUT -o $_dev -p tcp -m multiport --dports $zoom_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then
$ipt -A FORWARD -o $_dev -p tcp -m multiport --dports $zoom_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
fi
$ipt -A OUTPUT -o $_dev -p udp -m multiport --dports $zoom_udp_ports -m conntrack --ctstate NEW -j ACCEPT
if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then
$ipt -A FORWARD -o $_dev -p udp -m multiport --dports $zoom_udp_ports -m conntrack --ctstate NEW -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - Jitsi Video Conference Service out only
# ---