Add Support for IPMI access from outside.
This commit is contained in:
@@ -4928,6 +4928,40 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - IPMI Tools (e.g. IPMIView) in (from outside)
|
||||
# ---
|
||||
|
||||
echononl "\t\tIPMI Tools (e.g. IPMIView) in (from outside)"
|
||||
|
||||
if $allow_ipmi_request_in ; then
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
for _port in ${ipmi_udp_port_arr[@]} ; do
|
||||
$ip6t -A INPUT -i $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
done
|
||||
|
||||
for _port in ${ipmi_tcp_port_arr[@]} ; do
|
||||
$ip6t -A INPUT -i $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
done
|
||||
|
||||
if $kernel_forward_between_interfaces ; then
|
||||
|
||||
for _port in ${ipmi_udp_port_arr[@]} ; do
|
||||
$ip6t -A FORWARD -i $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
done
|
||||
for _port in ${ipmi_tcp_port_arr[@]} ; do
|
||||
$ip6t -A FORWARD -i $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
done
|
||||
fi
|
||||
|
||||
done
|
||||
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - IPMI Tools (e.g. IPMIView) local Networks
|
||||
# ---
|
||||
|
||||
Reference in New Issue
Block a user