safebox/firewall_containers
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ports in pair

Browse Source
This commit is contained in:
Gyorgy Berenyi
2023-05-15 06:50:22 +00:00
parent 46fde8a19f
commit 18c275bf73
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
firewall/firewall-add
View File

@@ -354,6 +354,10 @@ COUNT_SOURCE_PORT=$(set |grep SOURCE_PORT |wc -l)
COUNT_TARGET_IP=$(set |grep TARGET_IP |wc -l) COUNT_TARGET_IP=$(set |grep TARGET_IP |wc -l)
COUNT_TARGET_PORT=$(set |grep TARGET_PORT |wc -l) COUNT_TARGET_PORT=$(set |grep TARGET_PORT |wc -l)
# SOURCE AND TARGET PORTS ARE IN PAIRS
if [ "$COUNT_SOURCE_PORT" == "$COUNT_TARGET_PORT" ]; then PAIRS="1";
else PAIRS="0";
if [ "$COUNT_SOURCE_IP" == 0 ] ; then COUNT_SOURCE_IP=1 ; fi if [ "$COUNT_SOURCE_IP" == 0 ] ; then COUNT_SOURCE_IP=1 ; fi
for source_ip_index in $(seq 1 $COUNT_SOURCE_IP) ; do for source_ip_index in $(seq 1 $COUNT_SOURCE_IP) ; do
if set |grep SOURCE_IP_ ; then if set |grep SOURCE_IP_ ; then
@@ -378,6 +382,11 @@ for source_ip_index in $(seq 1 $COUNT_SOURCE_IP) ; do
TARGET_PORT=$(eval "echo \${"TARGET_PORT_$target_port_index"}") TARGET_PORT=$(eval "echo \${"TARGET_PORT_$target_port_index"}")
fi fi
# if case of pairs if indexes doesn't match then omit routing
if [ "$PAIRS" == "1"] && [ "$source_port_index" != "$target_port_index" ] ; then
continue;
fi;
############################# #############################
# NSENTER Specific settings # # NSENTER Specific settings #