aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rwxr-xr-xsrc/bbfw.in64
1 files changed, 32 insertions, 32 deletions
diff --git a/src/bbfw.in b/src/bbfw.in
index 2ebfab9..3f487e5 100755
--- a/src/bbfw.in
+++ b/src/bbfw.in
@@ -191,70 +191,70 @@ load()
191# Function to start the network: 191# Function to start the network:
192start() { 192start() {
193 # run pre-hooks 193 # run pre-hooks
194 run_hook start ${FW_PREFIX}global.d/pre-hook "running global pre-hook start ..." 194 run_hook start ${FW_PREFIX}global.d/pre-hook "running global pre-hook start ..."
195 for FILE in $( find_appfile pre-hook );do 195 for FILE in $( find_appfile pre-hook );do
196 run_hook start ${FILE} "running app pre-hook start (App: $(name_appfile ${FILE})) ..." 196 run_hook start ${FILE} "running app pre-hook start (App: $(name_appfile ${FILE})) ..."
197 done 197 done
198 run_hook start ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook start ..." 198 run_hook start ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook start ..."
199 run_hook start ${FW_PREFIX}pre-hook "running local pre-hook start ..." 199 run_hook start ${FW_PREFIX}pre-hook "running local pre-hook start ..."
200 200
201 # create IP sets 201 # create IP sets
202 load ipset ${FW_PREFIX}global.d/ipsets "adding global IP sets" 202 load ipset ${FW_PREFIX}global.d/ipsets "adding global IP sets"
203 for FILE in $( find_appfile ipsets );do 203 for FILE in $( find_appfile ipsets );do
204 load ipset ${FILE} "adding IP sets (App: $(name_appfile ${FILE})) ..." 204 load ipset ${FILE} "adding IP sets (App: $(name_appfile ${FILE})) ..."
205 done 205 done
206 load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets" 206 load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets"
207 load ipset ${FW_PREFIX}ipsets "adding local IP sets" 207 load ipset ${FW_PREFIX}ipsets "adding local IP sets"
208 208
209 # Application rules 209 # Application rules
210 for FILE in $( find_appfile rules4 );do 210 for FILE in $( find_appfile rules4 );do
211 load iptables ${FILE} "adding IPv4 rules (App: $(name_appfile ${FILE})) ..." 211 load iptables ${FILE} "adding IPv4 rules (App: $(name_appfile ${FILE})) ..."
212 done 212 done
213 for FILE in $( find_appfile rules6 );do 213 for FILE in $( find_appfile rules6 );do
214 load ip6tables ${FILE} "adding IPv6 rules (App: $(name_appfile ${FILE})) ..." 214 load ip6tables ${FILE} "adding IPv6 rules (App: $(name_appfile ${FILE})) ..."
215 done 215 done
216 for FILE in $( find_appfile rules );do 216 for FILE in $( find_appfile rules );do
217 load iptables ${FILE} "adding IPv4/IPv6 rules (App: $(name_appfile ${FILE})) ..." 217 load iptables ${FILE} "adding IPv4/IPv6 rules (App: $(name_appfile ${FILE})) ..."
218 load ip6tables ${FILE} 218 load ip6tables ${FILE}
219 done 219 done
220 220
221 # apply host specific firewall rules 221 # apply host specific firewall rules
222 load iptables ${FW_PREFIX}rules4 "adding IPv4 local rules" 222 load iptables ${FW_PREFIX}rules4 "adding IPv4 local rules"
223 load ip6tables ${FW_PREFIX}rules6 "adding IPv6 local rules" 223 load ip6tables ${FW_PREFIX}rules6 "adding IPv6 local rules"
224 load iptables ${FW_PREFIX}rules "adding IPv4/IPv6 local rules" 224 load iptables ${FW_PREFIX}rules "adding IPv4/IPv6 local rules"
225 load ip6tables ${FW_PREFIX}rules 225 load ip6tables ${FW_PREFIX}rules
226 226
227 # apply cluster specific firewall rules 227 # apply cluster specific firewall rules
228 load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules" 228 load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules"
229 load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules" 229 load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules"
230 load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules" 230 load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules"
231 load ip6tables ${FW_PREFIX}cluster.d/rules 231 load ip6tables ${FW_PREFIX}cluster.d/rules
232 232
233 # apply company policy for firewall rules 233 # apply company policy for firewall rules
234 load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" 234 load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules"
235 load ip6tables ${FW_PREFIX}global.d/rules6 "adding IPv6 global rules" 235 load ip6tables ${FW_PREFIX}global.d/rules6 "adding IPv6 global rules"
236 load iptables ${FW_PREFIX}global.d/rules "adding IPv4/IPv6 global rules" 236 load iptables ${FW_PREFIX}global.d/rules "adding IPv4/IPv6 global rules"
237 load ip6tables ${FW_PREFIX}global.d/rules 237 load ip6tables ${FW_PREFIX}global.d/rules
238 238
239 # run post-hooks 239 # run post-hooks
240 run_hook start ${FW_PREFIX}global.d/post-hook "running global post-hook start ..." 240 run_hook start ${FW_PREFIX}global.d/post-hook "running global post-hook start ..."
241 for FILE in $( find_appfile post-hook );do 241 for FILE in $( find_appfile post-hook );do
242 run_hook start ${FILE} "running app post-hook start (App: $(name_appfile ${FILE})) ..." 242 run_hook start ${FILE} "running app post-hook start (App: $(name_appfile ${FILE})) ..."
243 done 243 done
244 run_hook start ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook start ..." 244 run_hook start ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook start ..."
245 run_hook start ${FW_PREFIX}post-hook "running local post-hook start ..." 245 run_hook start ${FW_PREFIX}post-hook "running local post-hook start ..."
246} 246}
247 247
248 248
249# Function to stop the network: 249# Function to stop the network:
250stop() { 250stop() {
251 # run pre-hooks 251 # run pre-hooks
252 run_hook stop ${FW_PREFIX}global.d/pre-hook "running global pre-hook stop ..." 252 run_hook stop ${FW_PREFIX}global.d/pre-hook "running global pre-hook stop ..."
253 for FILE in $( find_appfile pre-hook );do 253 for FILE in $( find_appfile pre-hook );do
254 run_hook stop ${FILE} "running app pre-hook stop (App: $(name_appfile ${FILE})) ..." 254 run_hook stop ${FILE} "running app pre-hook stop (App: $(name_appfile ${FILE})) ..."
255 done 255 done
256 run_hook stop ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook stop ..." 256 run_hook stop ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook stop ..."
257 run_hook stop ${FW_PREFIX}pre-hook "running local pre-hook stop ..." 257 run_hook stop ${FW_PREFIX}pre-hook "running local pre-hook stop ..."
258 258
259 for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do 259 for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do
260 echo "Flushing rules from ${TABLE} table (IPv4)" 260 echo "Flushing rules from ${TABLE} table (IPv4)"
@@ -287,12 +287,12 @@ stop() {
287 done 287 done
288 288
289 # run post-hooks 289 # run post-hooks
290 run_hook stop ${FW_PREFIX}global.d/post-hook "running global post-hook stop ..." 290 run_hook stop ${FW_PREFIX}global.d/post-hook "running global post-hook stop ..."
291 for FILE in $( find_appfile post-hook );do 291 for FILE in $( find_appfile post-hook );do
292 run_hook stop ${FILE} "running app post-hook stop (App: $(name_appfile ${FILE})) ..." 292 run_hook stop ${FILE} "running app post-hook stop (App: $(name_appfile ${FILE})) ..."
293 done 293 done
294 run_hook stop ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook stop ..." 294 run_hook stop ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook stop ..."
295 run_hook stop ${FW_PREFIX}post-hook "running local post-hook stop ..." 295 run_hook stop ${FW_PREFIX}post-hook "running local post-hook stop ..."
296} 296}
297 297
298 298