mirror of
https://github.com/myvesta/vesta.git
synced 2024-11-21 04:50:10 -08:00
86 lines
2.4 KiB
Bash
Executable File
86 lines
2.4 KiB
Bash
Executable File
#!/bin/bash
|
|
# info: change firewall rule
|
|
# options: RULE ACTION IP PORT [PROTOCOL] [COMMENT]
|
|
#
|
|
# The function is used for changing existing firewall rule.
|
|
# It fully replace rule with new one but keeps same id.
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Variable&Function #
|
|
#----------------------------------------------------------#
|
|
|
|
# Importing system variables
|
|
source /etc/profile
|
|
|
|
# Argument definition
|
|
rule=$1
|
|
action=$(echo $2|tr '[:lower:]' '[:upper:]')
|
|
ip=$3
|
|
port_ext=$4
|
|
protocol=${5-TCP}
|
|
protocol=$(echo $protocol|tr '[:lower:]' '[:upper:]')
|
|
comment=$6
|
|
|
|
# Includes
|
|
source $VESTA/func/main.sh
|
|
source $VESTA/conf/vesta.conf
|
|
|
|
# Sort function
|
|
sort_fw_rules() {
|
|
cat $VESTA/data/firewall/rules.conf |\
|
|
sort -n -k 2 -t \' > $VESTA/data/firewall/rules.conf.tmp
|
|
mv -f $VESTA/data/firewall/rules.conf.tmp \
|
|
$VESTA/data/firewall/rules.conf
|
|
}
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Verifications #
|
|
#----------------------------------------------------------#
|
|
|
|
check_args '5' "$#" 'RULE ACTION IP PORT [PROTOCOL] [COMMENT]'
|
|
is_format_valid 'rule' 'action' 'protocol' 'port_ext' 'ip'
|
|
if [ ! -z "$comment" ]; then
|
|
is_format_valid 'comment'
|
|
fi
|
|
is_system_enabled "$FIREWALL_SYSTEM" 'FIREWALL_SYSTEM'
|
|
is_object_valid '../../data/firewall/rules' 'RULE' "$rule"
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Action #
|
|
#----------------------------------------------------------#
|
|
|
|
# Generating timestamp
|
|
time_n_date=$(date +'%T %F')
|
|
time=$(echo "$time_n_date" |cut -f 1 -d \ )
|
|
date=$(echo "$time_n_date" |cut -f 2 -d \ )
|
|
|
|
# Concatenating firewall rule
|
|
str="RULE='$rule' ACTION='$action' PROTOCOL='$protocol' PORT='$port_ext'"
|
|
str="$str IP='$ip' COMMENT='$comment' SUSPENDED='no'"
|
|
str="$str TIME='$time' DATE='$date'"
|
|
|
|
# Deleting old rule
|
|
sed -i "/RULE='$rule' /d" $VESTA/data/firewall/rules.conf
|
|
|
|
# Adding new
|
|
echo "$str" >> $VESTA/data/firewall/rules.conf
|
|
|
|
# Sorting firewall rules by id number
|
|
sort_fw_rules
|
|
|
|
# Updating system firewall
|
|
$BIN/v-update-firewall
|
|
|
|
|
|
#----------------------------------------------------------#
|
|
# Vesta #
|
|
#----------------------------------------------------------#
|
|
|
|
# Logging
|
|
log_event "$OK" "$ARGUMENTS"
|
|
|
|
exit
|