YunoHost/moulinette
1
0
Fork 0
mirror of https://github.com/YunoHost/moulinette.git synced 2024-09-03 20:06:31 +02:00
Code Issues Projects Releases Packages Wiki Activity

add UPnP IGD support

Browse source
This commit is contained in:
titoko 2013-01-10 21:57:42 +01:00
parent f94b04ec97
commit 04132f52d0
1 changed files with 35 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
yunohost_firewall.py
View file

@ -2,6 +2,8 @@
import os
import sys
import miniupnpc
try:
import yaml
except ImportError:
@ -109,23 +111,56 @@ def firewall_reload():
os.system ("ip6tables -P INPUT ACCEPT")
os.system ("ip6tables -F")
os.system ("ip6tables -X")
u=miniupnpc.UPnP()
u.discoverdelay=200
if u.discover()==0:
igd=False
win_msg(_("No igd devices found, you'll need to manually open port on your router"))
else:
u.selectigd()
igd=True
# list the redirections :
i = 0
while True:
p = u.getgenericportmapping(i)
if p==None:
break
(port, proto, (ihost,iport), desc, c, d, e) = p
u.deleteportmapping(port,proto);
#print port, desc
i = i + 1
if 22 not in firewall['ipv6']['TCP']:
update_yml(22,'TCP','a',True)
for i,port in enumerate (firewall['ipv4']['TCP']):
os.system ("iptables -A INPUT -p tcp -i eth0 --dport "+ str(port) +" -j ACCEPT")
if igd:
u.addportmapping(port,'TCP',u.lanaddr,port,'UPnP IGD Tester port %u' % port, '')
for i,port in enumerate (firewall['ipv4']['UDP']):
os.system ("iptables -A INPUT -p udp -i eth0 --dport "+ str(port) +" -j ACCEPT")
if igd:
u.addportmapping(port,'UDP',u.lanaddr,port,'UPnP IGD Tester port %u' % port, '')
for i,port in enumerate (firewall['ipv6']['TCP']):
os.system ("ip6tables -A INPUT -p tcp -i eth0 --dport "+ str(port) +" -j ACCEPT")
if igd:
u.addportmapping(port,'TCP',u.lanaddr,port,'UPnP IGD Tester port %u' % port, '')
for i,port in enumerate (firewall['ipv6']['UDP']):
os.system ("ip6tables -A INPUT -p udp -i eth0 --dport "+ str(port) +" -j ACCEPT")
if igd:
u.addportmapping(port,'UDP',u.lanaddr,port,'UPnP IGD Tester port %u' % port, '')
os.system ("iptables -P INPUT DROP")