script/admin-stuff
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update_firewall-script_ipt-gateway.sh: support (aufs) ro systems.

Browse Source
This commit is contained in:
Christoph 2020-03-21 17:39:46 +01:00
parent e87e25c9f8
commit 625dfda15f
1 changed files with 37 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
update_firewall-script_ipt-gateway.sh
View File

@ -198,7 +198,15 @@ DEFAULT_REPOSITORY_NAME="ipt-gateway"
DEFAULT_REPOSITORY_BASE_PATH="/usr/local/src" DEFAULT_REPOSITORY_BASE_PATH="/usr/local/src"
DEFAULT_IPV4_FIREWALL_SCRIPT="ipt-firewall-gateway" DEFAULT_IPV4_FIREWALL_SCRIPT="ipt-firewall-gateway"
DEFAULT_IPV6_FIREWALL_SCRIPT="ip6t-firewall-gateway" DEFAULT_IPV6_FIREWALL_SCRIPT="ip6t-firewall-gateway"
DEFAULT_CONFIG_DIR="/etc/ipt-firewall" if [[ -d "/ro/etc/ipt-firewall" ]] ; then
BIN_DIR="/ro/usr/local/sbin"
DEFAULT_CONFIG_DIR="/ro/etc/ipt-firewall"
RO_SYSTEM=true
else
BIN_DIR="/usr/local/sbin"
DEFAULT_CONFIG_DIR="/etc/ipt-firewall"
RO_SYSTEM=false
fi
DEFAULT_FIREWALL_CONFIGURATION_FILES=" DEFAULT_FIREWALL_CONFIGURATION_FILES="
include_functions.conf include_functions.conf
load_modules_ipv4.conf load_modules_ipv4.conf
@ -253,15 +261,27 @@ if $terminal ; then
echo "" echo ""
fi fi
if $RO_SYSTEM ; then
echononl "Remount '/ro' writable.."
remountrw > /dev/null 2> "$log_file"
if [[ $? -gt 0 ]]; then
echo_failed
fatal "$(cat "$log_file")"
else
echo_ok
fi
blank_line
fi
restart_ipv6_firewall=false restart_ipv6_firewall=false
restart_ipv4_firewall=false restart_ipv4_firewall=false
echononl "Copy firewall script '$IPV4_FIREWALL_SCRIPT' to /usr/local/sbin/ .." echononl "Copy firewall script '$IPV4_FIREWALL_SCRIPT' to ${BIN_DIR}/ .."
if [[ -f "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" ]]; then if [[ -f "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" ]]; then
if $(diff "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" "/usr/local/sbin/$IPV4_FIREWALL_SCRIPT" > /dev/null 2>&1) ; then if $(diff "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" "${BIN_DIR}/$IPV4_FIREWALL_SCRIPT" > /dev/null 2>&1) ; then
echo_skipped echo_skipped
else else
cp "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" /usr/local/sbin/ > "$log_file" 2>&1 cp "${REPOSITORY_PATH}/$IPV4_FIREWALL_SCRIPT" ${BIN_DIR}/ > "$log_file" 2>&1
if [[ $? -gt 0 ]]; then if [[ $? -gt 0 ]]; then
echo_failed echo_failed
error "$(cat "$log_file")" error "$(cat "$log_file")"
@ -275,12 +295,12 @@ else
warn "No file '$IPV4_FIREWALL_SCRIPT' found at repository '$REPOSITORY_NAME'" warn "No file '$IPV4_FIREWALL_SCRIPT' found at repository '$REPOSITORY_NAME'"
fi fi
echononl "Copy firewall script '$IPV6_FIREWALL_SCRIPT' to /usr/local/sbin/ .." echononl "Copy firewall script '$IPV6_FIREWALL_SCRIPT' to ${BIN_DIR}/ .."
if [[ -f "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" ]]; then if [[ -f "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" ]]; then
if $(diff "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" "/usr/local/sbin/$IPV6_FIREWALL_SCRIPT" > /dev/null 2>&1) ; then if $(diff "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" "${BIN_DIR}/$IPV6_FIREWALL_SCRIPT" > /dev/null 2>&1) ; then
echo_skipped echo_skipped
else else
cp "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" /usr/local/sbin/ > "$log_file" 2>&1 cp "${REPOSITORY_PATH}/$IPV6_FIREWALL_SCRIPT" ${BIN_DIR}/ > "$log_file" 2>&1
if [[ $? -gt 0 ]]; then if [[ $? -gt 0 ]]; then
echo_failed echo_failed
error "$(cat "$log_file")" error "$(cat "$log_file")"
@ -332,7 +352,7 @@ blank_line
echononl "Restart IPv4 Firewall.." echononl "Restart IPv4 Firewall.."
if $restart_ipv4_firewall ; then if $restart_ipv4_firewall ; then
/usr/local/sbin/$IPV4_FIREWALL_SCRIPT > /dev/null 2> "$log_file" ${BIN_DIR}/$IPV4_FIREWALL_SCRIPT > /dev/null 2> "$log_file"
if [[ $? -gt 0 ]]; then if [[ $? -gt 0 ]]; then
echo_failed echo_failed
else else
@ -345,8 +365,8 @@ fi
echononl "Restart IPv6 Firewall.." echononl "Restart IPv6 Firewall.."
if $restart_ipv6_firewall \ if $restart_ipv6_firewall \
&& [[ -f "/etc/ipt-firewall/main_ipv6.conf" ]] \ && [[ -f "/etc/ipt-firewall/main_ipv6.conf" ]] \
&& [[ -f "/usr/local/sbin/$IPV6_FIREWALL_SCRIPT" ]]; then && [[ -f "${BIN_DIR}/$IPV6_FIREWALL_SCRIPT" ]]; then
/usr/local/sbin/$IPV6_FIREWALL_SCRIPT > /dev/null 2> "$log_file" ${BIN_DIR}/$IPV6_FIREWALL_SCRIPT > /dev/null 2> "$log_file"
if [[ $? -gt 0 ]]; then if [[ $? -gt 0 ]]; then
echo_failed echo_failed
else else
@ -356,6 +376,13 @@ else
echo_skipped echo_skipped
fi fi
if $RO_SYSTEM ; then
blank_line
echononl "Remount '/ro' readonly.."
remountro > /dev/null 2> "$log_file"
echo_done
fi
info "Configuration files \033[1mmain_ipv[4|6].conf\033[m are not considered." info "Configuration files \033[1mmain_ipv[4|6].conf\033[m are not considered."