diff options
Diffstat (limited to 'src')
| -rwxr-xr-x | src/bbfw.in | 64 |
1 files changed, 32 insertions, 32 deletions
diff --git a/src/bbfw.in b/src/bbfw.in index 2ebfab9..3f487e5 100755 --- a/src/bbfw.in +++ b/src/bbfw.in | |||
| @@ -191,70 +191,70 @@ load() | |||
| 191 | # Function to start the network: | 191 | # Function to start the network: |
| 192 | start() { | 192 | start() { |
| 193 | # run pre-hooks | 193 | # run pre-hooks |
| 194 | run_hook start ${FW_PREFIX}global.d/pre-hook "running global pre-hook start ..." | 194 | run_hook start ${FW_PREFIX}global.d/pre-hook "running global pre-hook start ..." |
| 195 | for FILE in $( find_appfile pre-hook );do | 195 | for FILE in $( find_appfile pre-hook );do |
| 196 | run_hook start ${FILE} "running app pre-hook start (App: $(name_appfile ${FILE})) ..." | 196 | run_hook start ${FILE} "running app pre-hook start (App: $(name_appfile ${FILE})) ..." |
| 197 | done | 197 | done |
| 198 | run_hook start ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook start ..." | 198 | run_hook start ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook start ..." |
| 199 | run_hook start ${FW_PREFIX}pre-hook "running local pre-hook start ..." | 199 | run_hook start ${FW_PREFIX}pre-hook "running local pre-hook start ..." |
| 200 | 200 | ||
| 201 | # create IP sets | 201 | # create IP sets |
| 202 | load ipset ${FW_PREFIX}global.d/ipsets "adding global IP sets" | 202 | load ipset ${FW_PREFIX}global.d/ipsets "adding global IP sets" |
| 203 | for FILE in $( find_appfile ipsets );do | 203 | for FILE in $( find_appfile ipsets );do |
| 204 | load ipset ${FILE} "adding IP sets (App: $(name_appfile ${FILE})) ..." | 204 | load ipset ${FILE} "adding IP sets (App: $(name_appfile ${FILE})) ..." |
| 205 | done | 205 | done |
| 206 | load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets" | 206 | load ipset ${FW_PREFIX}cluster.d/ipsets "adding cluster IP sets" |
| 207 | load ipset ${FW_PREFIX}ipsets "adding local IP sets" | 207 | load ipset ${FW_PREFIX}ipsets "adding local IP sets" |
| 208 | 208 | ||
| 209 | # Application rules | 209 | # Application rules |
| 210 | for FILE in $( find_appfile rules4 );do | 210 | for FILE in $( find_appfile rules4 );do |
| 211 | load iptables ${FILE} "adding IPv4 rules (App: $(name_appfile ${FILE})) ..." | 211 | load iptables ${FILE} "adding IPv4 rules (App: $(name_appfile ${FILE})) ..." |
| 212 | done | 212 | done |
| 213 | for FILE in $( find_appfile rules6 );do | 213 | for FILE in $( find_appfile rules6 );do |
| 214 | load ip6tables ${FILE} "adding IPv6 rules (App: $(name_appfile ${FILE})) ..." | 214 | load ip6tables ${FILE} "adding IPv6 rules (App: $(name_appfile ${FILE})) ..." |
| 215 | done | 215 | done |
| 216 | for FILE in $( find_appfile rules );do | 216 | for FILE in $( find_appfile rules );do |
| 217 | load iptables ${FILE} "adding IPv4/IPv6 rules (App: $(name_appfile ${FILE})) ..." | 217 | load iptables ${FILE} "adding IPv4/IPv6 rules (App: $(name_appfile ${FILE})) ..." |
| 218 | load ip6tables ${FILE} | 218 | load ip6tables ${FILE} |
| 219 | done | 219 | done |
| 220 | 220 | ||
| 221 | # apply host specific firewall rules | 221 | # apply host specific firewall rules |
| 222 | load iptables ${FW_PREFIX}rules4 "adding IPv4 local rules" | 222 | load iptables ${FW_PREFIX}rules4 "adding IPv4 local rules" |
| 223 | load ip6tables ${FW_PREFIX}rules6 "adding IPv6 local rules" | 223 | load ip6tables ${FW_PREFIX}rules6 "adding IPv6 local rules" |
| 224 | load iptables ${FW_PREFIX}rules "adding IPv4/IPv6 local rules" | 224 | load iptables ${FW_PREFIX}rules "adding IPv4/IPv6 local rules" |
| 225 | load ip6tables ${FW_PREFIX}rules | 225 | load ip6tables ${FW_PREFIX}rules |
| 226 | 226 | ||
| 227 | # apply cluster specific firewall rules | 227 | # apply cluster specific firewall rules |
| 228 | load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules" | 228 | load iptables ${FW_PREFIX}cluster.d/rules4 "adding IPv4 cluster rules" |
| 229 | load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules" | 229 | load ip6tables ${FW_PREFIX}cluster.d/rules6 "adding IPv6 cluster rules" |
| 230 | load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules" | 230 | load iptables ${FW_PREFIX}cluster.d/rules "adding IPv4/IPv6 cluster rules" |
| 231 | load ip6tables ${FW_PREFIX}cluster.d/rules | 231 | load ip6tables ${FW_PREFIX}cluster.d/rules |
| 232 | 232 | ||
| 233 | # apply company policy for firewall rules | 233 | # apply company policy for firewall rules |
| 234 | load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" | 234 | load iptables ${FW_PREFIX}global.d/rules4 "adding IPv4 global rules" |
| 235 | load ip6tables ${FW_PREFIX}global.d/rules6 "adding IPv6 global rules" | 235 | load ip6tables ${FW_PREFIX}global.d/rules6 "adding IPv6 global rules" |
| 236 | load iptables ${FW_PREFIX}global.d/rules "adding IPv4/IPv6 global rules" | 236 | load iptables ${FW_PREFIX}global.d/rules "adding IPv4/IPv6 global rules" |
| 237 | load ip6tables ${FW_PREFIX}global.d/rules | 237 | load ip6tables ${FW_PREFIX}global.d/rules |
| 238 | 238 | ||
| 239 | # run post-hooks | 239 | # run post-hooks |
| 240 | run_hook start ${FW_PREFIX}global.d/post-hook "running global post-hook start ..." | 240 | run_hook start ${FW_PREFIX}global.d/post-hook "running global post-hook start ..." |
| 241 | for FILE in $( find_appfile post-hook );do | 241 | for FILE in $( find_appfile post-hook );do |
| 242 | run_hook start ${FILE} "running app post-hook start (App: $(name_appfile ${FILE})) ..." | 242 | run_hook start ${FILE} "running app post-hook start (App: $(name_appfile ${FILE})) ..." |
| 243 | done | 243 | done |
| 244 | run_hook start ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook start ..." | 244 | run_hook start ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook start ..." |
| 245 | run_hook start ${FW_PREFIX}post-hook "running local post-hook start ..." | 245 | run_hook start ${FW_PREFIX}post-hook "running local post-hook start ..." |
| 246 | } | 246 | } |
| 247 | 247 | ||
| 248 | 248 | ||
| 249 | # Function to stop the network: | 249 | # Function to stop the network: |
| 250 | stop() { | 250 | stop() { |
| 251 | # run pre-hooks | 251 | # run pre-hooks |
| 252 | run_hook stop ${FW_PREFIX}global.d/pre-hook "running global pre-hook stop ..." | 252 | run_hook stop ${FW_PREFIX}global.d/pre-hook "running global pre-hook stop ..." |
| 253 | for FILE in $( find_appfile pre-hook );do | 253 | for FILE in $( find_appfile pre-hook );do |
| 254 | run_hook stop ${FILE} "running app pre-hook stop (App: $(name_appfile ${FILE})) ..." | 254 | run_hook stop ${FILE} "running app pre-hook stop (App: $(name_appfile ${FILE})) ..." |
| 255 | done | 255 | done |
| 256 | run_hook stop ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook stop ..." | 256 | run_hook stop ${FW_PREFIX}cluster.d/pre-hook "running cluster pre-hook stop ..." |
| 257 | run_hook stop ${FW_PREFIX}pre-hook "running local pre-hook stop ..." | 257 | run_hook stop ${FW_PREFIX}pre-hook "running local pre-hook stop ..." |
| 258 | 258 | ||
| 259 | for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do | 259 | for TABLE in $(iptables-save |grep '^*' |sed -e 's/^*//g' |sort);do |
| 260 | echo "Flushing rules from ${TABLE} table (IPv4)" | 260 | echo "Flushing rules from ${TABLE} table (IPv4)" |
| @@ -287,12 +287,12 @@ stop() { | |||
| 287 | done | 287 | done |
| 288 | 288 | ||
| 289 | # run post-hooks | 289 | # run post-hooks |
| 290 | run_hook stop ${FW_PREFIX}global.d/post-hook "running global post-hook stop ..." | 290 | run_hook stop ${FW_PREFIX}global.d/post-hook "running global post-hook stop ..." |
| 291 | for FILE in $( find_appfile post-hook );do | 291 | for FILE in $( find_appfile post-hook );do |
| 292 | run_hook stop ${FILE} "running app post-hook stop (App: $(name_appfile ${FILE})) ..." | 292 | run_hook stop ${FILE} "running app post-hook stop (App: $(name_appfile ${FILE})) ..." |
| 293 | done | 293 | done |
| 294 | run_hook stop ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook stop ..." | 294 | run_hook stop ${FW_PREFIX}cluster.d/post-hook "running cluster post-hook stop ..." |
| 295 | run_hook stop ${FW_PREFIX}post-hook "running local post-hook stop ..." | 295 | run_hook stop ${FW_PREFIX}post-hook "running local post-hook stop ..." |
| 296 | } | 296 | } |
| 297 | 297 | ||
| 298 | 298 | ||
