You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
57 lines
1.7 KiB
57 lines
1.7 KiB
#!/bin/bash
|
|
# info: add system firewall
|
|
# options: NONE
|
|
#
|
|
# example: v-add-sys-firewall
|
|
#
|
|
# This function enables the system firewall.
|
|
|
|
#----------------------------------------------------------#
|
|
# Variables & Functions #
|
|
#----------------------------------------------------------#
|
|
|
|
# Includes
|
|
# shellcheck source=/etc/hestiacp/hestia.conf
|
|
source /etc/hestiacp/hestia.conf
|
|
# shellcheck source=/usr/local/hestia/func/main.sh
|
|
source $HESTIA/func/main.sh
|
|
# load config file
|
|
source_conf "$HESTIA/conf/hestia.conf"
|
|
|
|
#----------------------------------------------------------#
|
|
# Verifications #
|
|
#----------------------------------------------------------#
|
|
|
|
if [ "$FIREWALL_SYSTEM" = 'iptables' ]; then
|
|
exit
|
|
fi
|
|
|
|
# Perform verification if read-only mode is enabled
|
|
check_hestia_demo_mode
|
|
|
|
#----------------------------------------------------------#
|
|
# Action #
|
|
#----------------------------------------------------------#
|
|
|
|
# Adding default ruleset
|
|
if [ -z "$(ls -A $HESTIA/data/firewall 2> /dev/null)" ]; then
|
|
cp -rf $HESTIA_COMMON_DIR/firewall $HESTIA/data/
|
|
rm -f $HESTIA/data/firewall/ipset/blacklist.sh $HESTIA/data/firewall/ipset/blacklist.ipv6.sh
|
|
fi
|
|
|
|
# Updating FIREWAL_SYSTEM value
|
|
$BIN/v-change-sys-config-value "FIREWALL_SYSTEM" "iptables"
|
|
|
|
# Updating firewall rules
|
|
$BIN/v-update-firewall
|
|
|
|
#----------------------------------------------------------#
|
|
# Hestia #
|
|
#----------------------------------------------------------#
|
|
|
|
# Logging
|
|
$BIN/v-log-action "system" "Info" "Firewall" "System firewall enabled."
|
|
log_event "$OK" "$ARGUMENTS"
|
|
|
|
exit
|