diff options
| author | David M. Syzdek <syzdek@bindlebinaries.com> | 2019-03-07 13:00:34 -0900 |
|---|---|---|
| committer | David M. Syzdek <syzdek@bindlebinaries.com> | 2019-03-07 13:00:34 -0900 |
| commit | 30e1eddca641a4e3df3908b0b65cd93df127815f (patch) | |
| tree | 7f8b16df95da9a6fcc794efb0827f2f1761fe9e8 /src | |
| parent | 0c0784b209baad4b9157a2fa713147177e829b2a (diff) | |
| download | bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.gz bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.bz2 bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.xz bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.zip | |
rc.firewall: moving cluster configs from ./cluster to ./cluster.d
Diffstat (limited to 'src')
| -rwxr-xr-x | src/slack/rc.firewall.in | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/src/slack/rc.firewall.in b/src/slack/rc.firewall.in index a9f44f7..4e8cc03 100755 --- a/src/slack/rc.firewall.in +++ b/src/slack/rc.firewall.in | |||
| @@ -41,12 +41,12 @@ | |||
| 41 | # | 41 | # |
| 42 | # /etc/firewall.d/global.d/rules-pre - centrally maintained pre-hook script | 42 | # /etc/firewall.d/global.d/rules-pre - centrally maintained pre-hook script |
| 43 | # /etc/firewall.d/apps.d/*.pre - app pre-hook script | 43 | # /etc/firewall.d/apps.d/*.pre - app pre-hook script |
| 44 | # /etc/firewall.d/cluster/rules-pre - cluster specific pre-hook script | 44 | # /etc/firewall.d/cluster.d/rules-pre - cluster specific pre-hook script |
| 45 | # /etc/firewall.d/rules-pre - host specific pre-hook script | 45 | # /etc/firewall.d/rules-pre - host specific pre-hook script |
| 46 | # | 46 | # |
| 47 | # /etc/firewall.d/global.d/ipsets - centrally maintained IP sets | 47 | # /etc/firewall.d/global.d/ipsets - centrally maintained IP sets |
| 48 | # /etc/firewall.d/apps.d/*.ipsets - app specific IP sets | 48 | # /etc/firewall.d/apps.d/*.ipsets - app specific IP sets |
| 49 | # /etc/firewall.d/cluster/ipsets - cluster specific IP sets | 49 | # /etc/firewall.d/cluster.d/ipsets - cluster specific IP sets |
| 50 | # /etc/firewall.d/ipsets - host specific IP sets | 50 | # /etc/firewall.d/ipsets - host specific IP sets |
| 51 | # | 51 | # |
| 52 | # /etc/firewall.d/apps.d/*.rules4 - app specific IPv4 firewall rules | 52 | # /etc/firewall.d/apps.d/*.rules4 - app specific IPv4 firewall rules |
| @@ -57,9 +57,9 @@ | |||
| 57 | # /etc/firewall.d/rules6 - host specific IPv6 firewall rules | 57 | # /etc/firewall.d/rules6 - host specific IPv6 firewall rules |
| 58 | # /etc/firewall.d/rules - host specific IPv4/IPv6 firewall rules | 58 | # /etc/firewall.d/rules - host specific IPv4/IPv6 firewall rules |
| 59 | # | 59 | # |
| 60 | # /etc/firewall.d/cluster/rules4 - cluster specific IPv4 firewall rules | 60 | # /etc/firewall.d/cluster.d/rules4 - cluster specific IPv4 firewall rules |
| 61 | # /etc/firewall.d/cluster/rules6 - cluster specific IPv6 firewall rules | 61 | # /etc/firewall.d/cluster.d/rules6 - cluster specific IPv6 firewall rules |
| 62 | # /etc/firewall.d/cluster/rules - cluster specific IPv4/IPv6 firewall rules | 62 | # /etc/firewall.d/cluster.d/rules - cluster specific IPv4/IPv6 firewall rules |
| 63 | # | 63 | # |
| 64 | # /etc/firewall.d/global.d/rules4 - centrally maintained IPv4 rules | 64 | # /etc/firewall.d/global.d/rules4 - centrally maintained IPv4 rules |
| 65 | # /etc/firewall.d/global.d/rules6 - centrally maintained IPv6 rules | 65 | # /etc/firewall.d/global.d/rules6 - centrally maintained IPv6 rules |
| @@ -67,7 +67,7 @@ | |||
| 67 | # | 67 | # |
| 68 | # /etc/firewall.d/global.d/rules-post - centrally maintained post-hook script | 68 | # /etc/firewall.d/global.d/rules-post - centrally maintained post-hook script |
| 69 | # /etc/firewall.d/apps.d/*.post - app post-hook script | 69 | # /etc/firewall.d/apps.d/*.post - app post-hook script |
| 70 | # /etc/firewall.d/cluster/rules-post - host specific post-hook script | 70 | # /etc/firewall.d/cluster.d/rules-post - host specific post-hook script |
| 71 | # /etc/firewall.d/rules-post - host specific post-hook script | 71 | # /etc/firewall.d/rules-post - host specific post-hook script |
| 72 | # | 72 | # |
| 73 | 73 | ||
| @@ -198,7 +198,7 @@ start() { | |||
| 198 | for FILE in $( find_appfile pre );do | 198 | for FILE in $( find_appfile pre );do |
| 199 | run_hook start ${FILE} "running app pre-hook start (App: $(basename ${FILE})) ..." | 199 | run_hook start ${FILE} "running app pre-hook start (App: $(basename ${FILE})) ..." |
| 200 | done | 200 | done |
| 201 | run_hook start ${FW_PREFIX}cluster/rules-pre "running cluster pre-hook start ..." | 201 | run_hook start ${FW_PREFIX}cluster.d/rules-pre "running cluster pre-hook start ..." |
| 202 | run_hook start ${FW_PREFIX}rules-pre "running local pre-hook start ..." | 202 | run_hook start ${FW_PREFIX}rules-pre "running local pre-hook start ..." |
| 203 | 203 | ||
| 204 | # create IP sets | 204 | # create IP sets |
| @@ -206,7 +206,7 @@ start() { | |||
| 206 | for FILE in $( find_appfile ipsets );do | 206 | for FILE in $( find_appfile ipsets );do |
| 207 | load ipset ${FILE} "adding IP sets (App: $(basename ${FILE})) ..." | 207 | load ipset ${FILE} "adding IP sets (App: $(basename ${FILE})) ..." |
| 208 | done | 208 | done |
| 209 | load ipset ${FW_PREFIX}cluster/ipsets "adding cluster IP sets" | 209 | load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets" |
| 210 | load ipset ${FW_PREFIX}ipsets "adding local IP sets" | 210 | load ipset ${FW_PREFIX}ipsets "adding local IP sets" |
| 211 | 211 | ||
| 212 | # Application rules | 212 | # Application rules |
| @@ -239,10 +239,10 @@ start() { | |||
| 239 | load ip6tables ${FW_PREFIX}rules | 239 | load ip6tables ${FW_PREFIX}rules |
| 240 | 240 | ||
| 241 | # apply cluster specific firewall rules | 241 | # apply cluster specific firewall rules |
| 242 | load iptables ${FW_PREFIX}cluster/rules4 "adding IPv4 cluster rules" | 242 | load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules" |
| 243 | load ip6tables ${FW_PREFIX}cluster/rules6 "adding IPv6 cluster rules" | 243 | load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules" |
| 244 | load iptables ${FW_PREFIX}cluster/rules "adding IPv4/IPv6 cluster rules" | 244 | load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules" |
| 245 | load ip6tables ${FW_PREFIX}cluster/rules | 245 | load ip6tables ${FW_PREFIX}cluster.d/rules |
| 246 | 246 | ||
| 247 | # apply company policy for firewall rules | 247 | # apply company policy for firewall rules |
| 248 | load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" | 248 | load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" |
| @@ -255,7 +255,7 @@ start() { | |||
| 255 | for FILE in $( find_appfile post );do | 255 | for FILE in $( find_appfile post );do |
| 256 | run_hook start ${FILE} "running app post-hook start (App: $(basename ${FILE})) ..." | 256 | run_hook start ${FILE} "running app post-hook start (App: $(basename ${FILE})) ..." |
| 257 | done | 257 | done |
| 258 | run_hook start ${FW_PREFIX}cluster/rules-post "running cluster post-hook start ..." | 258 | run_hook start ${FW_PREFIX}cluster.d/rules-post "running cluster post-hook start ..." |
| 259 | run_hook start ${FW_PREFIX}rules-post "running local post-hook start ..." | 259 | run_hook start ${FW_PREFIX}rules-post "running local post-hook start ..." |
| 260 | } | 260 | } |
| 261 | 261 | ||
| @@ -267,7 +267,7 @@ stop() { | |||
| 267 | for FILE in $( find_appfile pre );do | 267 | for FILE in $( find_appfile pre );do |
| 268 | run_hook stop ${FILE} "running app pre-hook stop (App: $(basename ${FILE})) ..." | 268 | run_hook stop ${FILE} "running app pre-hook stop (App: $(basename ${FILE})) ..." |
| 269 | done | 269 | done |
| 270 | run_hook stop ${FW_PREFIX}cluster/rules-pre "running cluster pre-hook stop ..." | 270 | run_hook stop ${FW_PREFIX}cluster.d/rules-pre "running cluster pre-hook stop ..." |
| 271 | run_hook stop ${FW_PREFIX}rules-pre "running local pre-hook stop ..." | 271 | run_hook stop ${FW_PREFIX}rules-pre "running local pre-hook stop ..." |
| 272 | 272 | ||
| 273 | for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do | 273 | for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do |
| @@ -305,7 +305,7 @@ stop() { | |||
| 305 | for FILE in $( find_appfile post );do | 305 | for FILE in $( find_appfile post );do |
| 306 | run_hook stop ${FILE} "running app post-hook stop (App: $(basename ${FILE})) ..." | 306 | run_hook stop ${FILE} "running app post-hook stop (App: $(basename ${FILE})) ..." |
| 307 | done | 307 | done |
| 308 | run_hook stop ${FW_PREFIX}cluster/rules-post "running cluster post-hook stop ..." | 308 | run_hook stop ${FW_PREFIX}cluster.d/rules-post "running cluster post-hook stop ..." |
| 309 | run_hook stop ${FW_PREFIX}rules-post "running local post-hook stop ..." | 309 | run_hook stop ${FW_PREFIX}rules-post "running local post-hook stop ..." |
| 310 | } | 310 | } |
| 311 | 311 | ||
