YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #5 from Josue-T/patch-2

Browse source 
Support du port ssh de manière dynamique
This commit is contained in:
Alexis Gavoty 2014-06-05 22:42:01 +02:00
commit 34f2f61e76
1 changed files with 29 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
firewall.py
View file

@ -35,6 +35,31 @@ except ImportError:
from moulinette.core import MoulinetteError from moulinette.core import MoulinetteError
""" Search the ssh port in ssh config file
If we don't find the ssh port we define 22"""
try:
with open('/etc/ssh/sshd_config') as ssh_config_file:
for line in ssh_config_file:
line0 = line.split(" ")[0]
if line0 == 'Port':
ssh_port = line.split(' ')[1]
ssh_port = ssh_port.rstrip('\n\r')
ssh_config_file.close()
if ssh_port == '' :
ssh_port = '22'
except:
ssh_port = '22'
ssh_port = int(ssh_port)
def firewall_allow(port=None, protocol='TCP', ipv6=False, no_upnp=False): def firewall_allow(port=None, protocol='TCP', ipv6=False, no_upnp=False):
""" """
@ -163,8 +188,8 @@ def firewall_reload():
os.system("iptables -X") os.system("iptables -X")
os.system("iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT") os.system("iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT")
if 22 not in firewall['ipv4']['TCP']: if ssh_port not in firewall['ipv4']['TCP']:
firewall_allow(22) firewall_allow(ssh_port)
# Loop # Loop
for protocol in ['TCP', 'UDP']: for protocol in ['TCP', 'UDP']:
@ -184,8 +209,8 @@ def firewall_reload():
os.system("ip6tables -X") os.system("ip6tables -X")
os.system("ip6tables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT") os.system("ip6tables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT")
if 22 not in firewall['ipv6']['TCP']: if ssh_port not in firewall['ipv6']['TCP']:
firewall_allow(22, ipv6=True) firewall_allow(ssh_port, ipv6=True)
# Loop v6 # Loop v6
for protocol in ['TCP', 'UDP']: for protocol in ['TCP', 'UDP']: