aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/src
diff options
context:
space:
mode:
authorDavid M. Syzdek <syzdek@bindlebinaries.com>2019-03-07 13:00:34 -0900
committerDavid M. Syzdek <syzdek@bindlebinaries.com>2019-03-07 13:00:34 -0900
commit30e1eddca641a4e3df3908b0b65cd93df127815f (patch)
tree7f8b16df95da9a6fcc794efb0827f2f1761fe9e8 /src
parent0c0784b209baad4b9157a2fa713147177e829b2a (diff)
downloadbbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.gz
bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.bz2
bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.tar.xz
bbfw-30e1eddca641a4e3df3908b0b65cd93df127815f.zip
rc.firewall: moving cluster configs from ./cluster to ./cluster.d
Diffstat (limited to 'src')
-rwxr-xr-xsrc/slack/rc.firewall.in30
1 files changed, 15 insertions, 15 deletions
diff --git a/src/slack/rc.firewall.in b/src/slack/rc.firewall.in
index a9f44f7..4e8cc03 100755
--- a/src/slack/rc.firewall.in
+++ b/src/slack/rc.firewall.in
@@ -41,12 +41,12 @@
41# 41#
42# /etc/firewall.d/global.d/rules-pre - centrally maintained pre-hook script 42# /etc/firewall.d/global.d/rules-pre - centrally maintained pre-hook script
43# /etc/firewall.d/apps.d/*.pre - app pre-hook script 43# /etc/firewall.d/apps.d/*.pre - app pre-hook script
44# /etc/firewall.d/cluster/rules-pre - cluster specific pre-hook script 44# /etc/firewall.d/cluster.d/rules-pre - cluster specific pre-hook script
45# /etc/firewall.d/rules-pre - host specific pre-hook script 45# /etc/firewall.d/rules-pre - host specific pre-hook script
46# 46#
47# /etc/firewall.d/global.d/ipsets - centrally maintained IP sets 47# /etc/firewall.d/global.d/ipsets - centrally maintained IP sets
48# /etc/firewall.d/apps.d/*.ipsets - app specific IP sets 48# /etc/firewall.d/apps.d/*.ipsets - app specific IP sets
49# /etc/firewall.d/cluster/ipsets - cluster specific IP sets 49# /etc/firewall.d/cluster.d/ipsets - cluster specific IP sets
50# /etc/firewall.d/ipsets - host specific IP sets 50# /etc/firewall.d/ipsets - host specific IP sets
51# 51#
52# /etc/firewall.d/apps.d/*.rules4 - app specific IPv4 firewall rules 52# /etc/firewall.d/apps.d/*.rules4 - app specific IPv4 firewall rules
@@ -57,9 +57,9 @@
57# /etc/firewall.d/rules6 - host specific IPv6 firewall rules 57# /etc/firewall.d/rules6 - host specific IPv6 firewall rules
58# /etc/firewall.d/rules - host specific IPv4/IPv6 firewall rules 58# /etc/firewall.d/rules - host specific IPv4/IPv6 firewall rules
59# 59#
60# /etc/firewall.d/cluster/rules4 - cluster specific IPv4 firewall rules 60# /etc/firewall.d/cluster.d/rules4 - cluster specific IPv4 firewall rules
61# /etc/firewall.d/cluster/rules6 - cluster specific IPv6 firewall rules 61# /etc/firewall.d/cluster.d/rules6 - cluster specific IPv6 firewall rules
62# /etc/firewall.d/cluster/rules - cluster specific IPv4/IPv6 firewall rules 62# /etc/firewall.d/cluster.d/rules - cluster specific IPv4/IPv6 firewall rules
63# 63#
64# /etc/firewall.d/global.d/rules4 - centrally maintained IPv4 rules 64# /etc/firewall.d/global.d/rules4 - centrally maintained IPv4 rules
65# /etc/firewall.d/global.d/rules6 - centrally maintained IPv6 rules 65# /etc/firewall.d/global.d/rules6 - centrally maintained IPv6 rules
@@ -67,7 +67,7 @@
67# 67#
68# /etc/firewall.d/global.d/rules-post - centrally maintained post-hook script 68# /etc/firewall.d/global.d/rules-post - centrally maintained post-hook script
69# /etc/firewall.d/apps.d/*.post - app post-hook script 69# /etc/firewall.d/apps.d/*.post - app post-hook script
70# /etc/firewall.d/cluster/rules-post - host specific post-hook script 70# /etc/firewall.d/cluster.d/rules-post - host specific post-hook script
71# /etc/firewall.d/rules-post - host specific post-hook script 71# /etc/firewall.d/rules-post - host specific post-hook script
72# 72#
73 73
@@ -198,7 +198,7 @@ start() {
198 for FILE in $( find_appfile pre );do 198 for FILE in $( find_appfile pre );do
199 run_hook start ${FILE} "running app pre-hook start (App: $(basename ${FILE})) ..." 199 run_hook start ${FILE} "running app pre-hook start (App: $(basename ${FILE})) ..."
200 done 200 done
201 run_hook start ${FW_PREFIX}cluster/rules-pre "running cluster pre-hook start ..." 201 run_hook start ${FW_PREFIX}cluster.d/rules-pre "running cluster pre-hook start ..."
202 run_hook start ${FW_PREFIX}rules-pre "running local pre-hook start ..." 202 run_hook start ${FW_PREFIX}rules-pre "running local pre-hook start ..."
203 203
204 # create IP sets 204 # create IP sets
@@ -206,7 +206,7 @@ start() {
206 for FILE in $( find_appfile ipsets );do 206 for FILE in $( find_appfile ipsets );do
207 load ipset ${FILE} "adding IP sets (App: $(basename ${FILE})) ..." 207 load ipset ${FILE} "adding IP sets (App: $(basename ${FILE})) ..."
208 done 208 done
209 load ipset ${FW_PREFIX}cluster/ipsets "adding cluster IP sets" 209 load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets"
210 load ipset ${FW_PREFIX}ipsets "adding local IP sets" 210 load ipset ${FW_PREFIX}ipsets "adding local IP sets"
211 211
212 # Application rules 212 # Application rules
@@ -239,10 +239,10 @@ start() {
239 load ip6tables ${FW_PREFIX}rules 239 load ip6tables ${FW_PREFIX}rules
240 240
241 # apply cluster specific firewall rules 241 # apply cluster specific firewall rules
242 load iptables ${FW_PREFIX}cluster/rules4 "adding IPv4 cluster rules" 242 load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules"
243 load ip6tables ${FW_PREFIX}cluster/rules6 "adding IPv6 cluster rules" 243 load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules"
244 load iptables ${FW_PREFIX}cluster/rules "adding IPv4/IPv6 cluster rules" 244 load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules"
245 load ip6tables ${FW_PREFIX}cluster/rules 245 load ip6tables ${FW_PREFIX}cluster.d/rules
246 246
247 # apply company policy for firewall rules 247 # apply company policy for firewall rules
248 load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" 248 load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules"
@@ -255,7 +255,7 @@ start() {
255 for FILE in $( find_appfile post );do 255 for FILE in $( find_appfile post );do
256 run_hook start ${FILE} "running app post-hook start (App: $(basename ${FILE})) ..." 256 run_hook start ${FILE} "running app post-hook start (App: $(basename ${FILE})) ..."
257 done 257 done
258 run_hook start ${FW_PREFIX}cluster/rules-post "running cluster post-hook start ..." 258 run_hook start ${FW_PREFIX}cluster.d/rules-post "running cluster post-hook start ..."
259 run_hook start ${FW_PREFIX}rules-post "running local post-hook start ..." 259 run_hook start ${FW_PREFIX}rules-post "running local post-hook start ..."
260} 260}
261 261
@@ -267,7 +267,7 @@ stop() {
267 for FILE in $( find_appfile pre );do 267 for FILE in $( find_appfile pre );do
268 run_hook stop ${FILE} "running app pre-hook stop (App: $(basename ${FILE})) ..." 268 run_hook stop ${FILE} "running app pre-hook stop (App: $(basename ${FILE})) ..."
269 done 269 done
270 run_hook stop ${FW_PREFIX}cluster/rules-pre "running cluster pre-hook stop ..." 270 run_hook stop ${FW_PREFIX}cluster.d/rules-pre "running cluster pre-hook stop ..."
271 run_hook stop ${FW_PREFIX}rules-pre "running local pre-hook stop ..." 271 run_hook stop ${FW_PREFIX}rules-pre "running local pre-hook stop ..."
272 272
273 for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do 273 for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do
@@ -305,7 +305,7 @@ stop() {
305 for FILE in $( find_appfile post );do 305 for FILE in $( find_appfile post );do
306 run_hook stop ${FILE} "running app post-hook stop (App: $(basename ${FILE})) ..." 306 run_hook stop ${FILE} "running app post-hook stop (App: $(basename ${FILE})) ..."
307 done 307 done
308 run_hook stop ${FW_PREFIX}cluster/rules-post "running cluster post-hook stop ..." 308 run_hook stop ${FW_PREFIX}cluster.d/rules-post "running cluster post-hook stop ..."
309 run_hook stop ${FW_PREFIX}rules-post "running local post-hook stop ..." 309 run_hook stop ${FW_PREFIX}rules-post "running local post-hook stop ..."
310} 310}
311 311