public/gpupdate
1
0
Fork 1
mirror of https://github.com/altlinux/gpupdate.git synced 2025-03-21 18:50:38 +03:00
Code Releases Wiki Activity

Firewall applier working with host mode

Browse Source
This commit is contained in:
Игорь Чудов 2020-06-25 17:22:48 +04:00
parent 0f8db2fdcb
commit beb3ae9359
Signed by untrusted user: nir
GPG Key ID: 0F3883600CAE7AAC
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
gpoa/frontend/appliers/firewall_rule.py
View File

@ -56,6 +56,7 @@ class Protocol(Enum):
class FirewallMode(Enum):
ROUTER = 'router'
GATEWAY = 'gateway'
HOST = 'host'
# This shi^Wthing named alterator-net-iptables is unable to work in
# multi-threaded environment
@ -70,8 +71,27 @@ class FirewallRule:
self.properties = getprops(data_array[1:])
def apply(self):
tcp_command = []
udp_command = []
for port in self.ports:
portcmd = [self.__alterator_command, 'write', '-t', '+{}'.format(port), '-u', '+{}'.format(port)]
tcp_port = '{}'.format(port)
udp_port = '{}'.format(port)
if PortState.OPEN.value == self.properties['action']:
tcp_port = '+' + tcp_port
udp_port = '+' + udp_port
if PortState.CLOSE.value == self.properties['action']:
tcp_port = '-' + tcp_port
udp_port = '-' + udp_port
portcmd = [
self.__alterator_command
, 'write'
, '-m', FirewallMode.HOST.value
, '-t', '+{}'.format(port)
, '-u', '+{}'.format(port)
]
proc = subprocess.Popen(portcmd)
proc.wait()