##// END OF EJS Templates
Raspi2-3_GenImage
RSS

Cloner depuis https://github.com/drtyhlpr/rpi23-gen-image.git

Fixed: DISABLE_UNDERVOLT_WARNINGS typo
Fixed: DISABLE_UNDERVOLT_WARNINGS typo
drtyhlpr - - Load All Authors

Fichier de la dernière révision:

r94:2ce085c56493
r131:2ac4016ec66e
Show More
21-firewall.sh
44 lines | 1.5 KiB | application/x-sh | BashLexer
/ bootstrap.d / 21-firewall.sh
Historique | Source | Brut |Copy content |Copy permalink
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 #
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
 r67 # Setup Firewall
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 #
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
 r67 # Load utility functions
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 . ./functions.sh
if [ "$ENABLE_IPTABLES" = true ] ; then
# Create iptables configuration directory
drtyhlpr
Added Raspberry Pi 3 model support
 r94 mkdir -p "${ETC_DIR}/iptables"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install iptables systemd service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/iptables.service "${ETC_DIR}/systemd/system/iptables.service"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install flush-table script called by iptables service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_exec files/iptables/flush-iptables.sh "${ETC_DIR}/iptables/flush-iptables.sh"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install iptables rule file
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/iptables.rules "${ETC_DIR}/iptables/iptables.rules"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
# Reload systemd configuration and enable iptables service
chroot_exec systemctl daemon-reload
chroot_exec systemctl enable iptables.service
if [ "$ENABLE_IPV6" = true ] ; then
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install ip6tables systemd service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/ip6tables.service "${ETC_DIR}/systemd/system/ip6tables.service"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install ip6tables file
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_exec files/iptables/flush-ip6tables.sh "${ETC_DIR}/iptables/flush-ip6tables.sh"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/ip6tables.rules "${ETC_DIR}/iptables/ip6tables.rules"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
# Reload systemd configuration and enable iptables service
chroot_exec systemctl daemon-reload
chroot_exec systemctl enable ip6tables.service
fi
fi
if [ "$ENABLE_SSHD" = false ] ; then
Jan Wagner
code cleanup and even more spliting
 r70 # Remove SSHD related iptables rules
drtyhlpr
Added Raspberry Pi 3 model support
 r94 sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/iptables.rules" 2> /dev/null
sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/ip6tables.rules" 2> /dev/null
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 fi