Add Support for IPMI access from outside.

This commit is contained in:
2025-09-23 16:46:05 +02:00
parent b547d5dc0e
commit 8b8060f0fa
5 changed files with 93 additions and 0 deletions

View File

@@ -4928,6 +4928,40 @@ else
fi
# ---
# - IPMI Tools (e.g. IPMIView) in (from outside)
# ---
echononl "\t\tIPMI Tools (e.g. IPMIView) in (from outside)"
if $allow_ipmi_request_in ; then
for _dev in ${ext_if_arr[@]} ; do
for _port in ${ipmi_udp_port_arr[@]} ; do
$ip6t -A INPUT -i $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
for _port in ${ipmi_tcp_port_arr[@]} ; do
$ip6t -A INPUT -i $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
if $kernel_forward_between_interfaces ; then
for _port in ${ipmi_udp_port_arr[@]} ; do
$ip6t -A FORWARD -i $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
for _port in ${ipmi_tcp_port_arr[@]} ; do
$ip6t -A FORWARD -i $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
fi
done
echo_done
else
echo_skipped
fi
# ---
# - IPMI Tools (e.g. IPMIView) local Networks
# ---