YunoHost/moulinette
1
0
Fork 0
mirror of https://github.com/YunoHost/moulinette.git synced 2024-09-03 20:06:31 +02:00
Code Issues Projects Releases Packages Wiki Activity

Update yunohost_firewall.py

Browse source 
Update comment & return
This commit is contained in:
titoko 2012-12-13 11:23:10 +01:00 committed by Titoko
parent 89373e9c5b
commit d49edb2e4d
1 changed files with 35 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

49
yunohost_firewall.py
View file

@ -16,9 +16,12 @@ def firewall_allow(protocol=None,port=None,ipv6=None):
Allow port in iptables
Keyword arguments:
protocol
port
ipv6
protocol -- Protocol used
port -- Port to open
ipv6 -- Boolean ipv6
Return
Dict
"""
if ipv6 == True:
@ -42,6 +45,8 @@ def firewall_allow(protocol=None,port=None,ipv6=None):
rule = iptables+" -A INPUT -p "+ protocol +" -i eth0 --dport "+ port +" -j ACCEPT"
update_yml(port,protocol,'a',ip)
os.system(rule)
return firewall_list()
@ -50,9 +55,12 @@ def firewall_disallow(protocol=None,port=None,ipv6=None):
Disallow port in iptables
Keyword arguments:
protocol
port
ipv6
protocol -- Protocol used
port -- Port to open
ipv6 -- Boolean ipv6
Return
Dict
"""
@ -77,15 +85,21 @@ def firewall_disallow(protocol=None,port=None,ipv6=None):
rule = iptables+" -A INPUT -p "+ protocol +" -i eth0 --dport "+ port +" -j REJECT"
update_yml(port,protocol,'r',ip)
os.system(rule)
return firewall_list
def firewall_list():
"""
Display list of allow port
Allow port in iptables
Keyword arguments:
None
None
Return
Dict
"""
with open ('firewall.yml') as f:
firewall = yaml.load(f)
@ -98,7 +112,10 @@ def firewall_reload():
Reload iptables configuration
Keyword arguments:
None
None
Return
Dict
'''
with open('firewall.yml','r') as f:
firewall = yaml.load(f)
@ -134,7 +151,8 @@ def firewall_reload():
os.system ("iptables -P INPUT DROP")
os.system ("ip6tables -P INPUT DROP")
firewall_list()
return firewall_list()
@ -143,10 +161,13 @@ def update_yml(port=None,protocol=None,mode=None,ip=None):
Update firewall.yml
Keyword arguments:
protocol
port
mode
ipv6
protocol -- Protocol used
port -- Port to open
mode -- a=append r=remove
ipv6 -- Boolean ipv6
Return
None
"""