forked from extern/shorewall_code
163 lines
5.1 KiB
Perl
Executable File
163 lines
5.1 KiB
Perl
Executable File
#! /usr/bin/perl -w
|
|
#
|
|
# The Shoreline Firewall Packet Filtering Firewall Compiler - V4.4
|
|
#
|
|
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
|
|
#
|
|
# (c) 2007,2008,2009,2010,2011 - Tom Eastep (teastep@shorewall.net)
|
|
#
|
|
# Complete documentation is available at http://shorewall.net
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of Version 2 of the GNU General Public License
|
|
# as published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
#
|
|
# Usage:
|
|
#
|
|
# compiler.pl [ <option> ... ] [ <filename> ]
|
|
#
|
|
# Options:
|
|
#
|
|
# --export # Compile for export
|
|
# --verbosity=<number> # Set VERBOSITY range -1 to 2
|
|
# --directory=<directory> # Directory where configuration resides (default is /etc/shorewall)
|
|
# --timestamp # Timestamp all progress messages
|
|
# --debug # Print stack trace on warnings and fatal error.
|
|
# --refresh=<chainlist> # Make the 'refresh' command refresh a comma-separated list of chains rather than 'blacklst'.
|
|
# --log=<filename> # Log file
|
|
# --log_verbosity=<number> # Log Verbosity range -1 to 2
|
|
# --family=<number> # IP family; 4 = IPv4 (default), 6 = IPv6
|
|
# --preview # Preview the ruleset.
|
|
# --shorewallrc=<path> # Path to global shorewallrc file.
|
|
# --shorewallrc1=<path> # Path to export shorewallrc file.
|
|
# --config_path=<path-list> # Search path for config files
|
|
#
|
|
use strict;
|
|
use FindBin;
|
|
use lib "$FindBin::Bin";
|
|
use Shorewall::Compiler;
|
|
use Getopt::Long;
|
|
|
|
sub usage( $ ) {
|
|
|
|
print STDERR 'usage: compiler.pl [ <option> ... ] [ <filename> ]
|
|
|
|
options are:
|
|
[ --export ]
|
|
[ --directory=<directory> ]
|
|
[ --verbose={-1|0-2} ]
|
|
[ --timestamp ]
|
|
[ --debug ]
|
|
[ --confess ]
|
|
[ --refresh=<chainlist> ]
|
|
[ --log=<filename> ]
|
|
[ --log-verbose={-1|0-2} ]
|
|
[ --test ]
|
|
[ --preview ]
|
|
[ --family={4|6} ]
|
|
[ --annotate ]
|
|
[ --update ]
|
|
[ --convert ]
|
|
[ --directives ]
|
|
[ --shorewallrc=<pathname> ]
|
|
[ --shorewallrc1=<pathname> ]
|
|
[ --config_path=<path-list> ]
|
|
';
|
|
|
|
exit shift @_;
|
|
}
|
|
|
|
#
|
|
# E x e c u t i o n B e g i n s H e r e
|
|
#
|
|
my $export = 0;
|
|
my $shorewall_dir = '';
|
|
my $verbose = 0;
|
|
my $timestamp = 0;
|
|
my $debug = 0;
|
|
my $confess = 0;
|
|
my $chains = ':none:';
|
|
my $log = '';
|
|
my $log_verbose = 0;
|
|
my $help = 0;
|
|
my $test = 0;
|
|
my $family = 4; # F_IPV4
|
|
my $preview = 0;
|
|
my $annotate = 0;
|
|
my $update = 0;
|
|
my $convert = 0;
|
|
my $directives = 0;
|
|
my $config_path = '';
|
|
my $shorewallrc = '';
|
|
my $shorewallrc1 = '';
|
|
|
|
Getopt::Long::Configure ('bundling');
|
|
|
|
my $result = GetOptions('h' => \$help,
|
|
'help' => \$help,
|
|
'export' => \$export,
|
|
'e' => \$export,
|
|
'directory=s' => \$shorewall_dir,
|
|
'd=s' => \$shorewall_dir,
|
|
'verbose=i' => \$verbose,
|
|
'v=i' => \$verbose,
|
|
'timestamp' => \$timestamp,
|
|
't' => \$timestamp,
|
|
'debug' => \$debug,
|
|
'r=s' => \$chains,
|
|
'refresh=s' => \$chains,
|
|
'log=s' => \$log,
|
|
'l=s' => \$log,
|
|
'log_verbosity=i' => \$log_verbose,
|
|
'test' => \$test,
|
|
'preview' => \$preview,
|
|
'f=i' => \$family,
|
|
'family=i' => \$family,
|
|
'c' => \$confess,
|
|
'confess' => \$confess,
|
|
'a' => \$annotate,
|
|
'annotate' => \$annotate,
|
|
'directives' => \$directives,
|
|
'D' => \$directives,
|
|
'u' => \$update,
|
|
'update' => \$update,
|
|
'convert' => \$convert,
|
|
'config_path=s' => \$config_path,
|
|
'shorewallrc=s' => \$shorewallrc,
|
|
'shorewallrc1=s' => \$shorewallrc1,
|
|
);
|
|
|
|
usage(1) unless $result && @ARGV < 2;
|
|
usage(0) if $help;
|
|
|
|
compiler( script => $ARGV[0] || '',
|
|
directory => $shorewall_dir,
|
|
verbosity => $verbose,
|
|
timestamp => $timestamp,
|
|
debug => $debug,
|
|
export => $export,
|
|
chains => $chains,
|
|
log => $log,
|
|
log_verbosity => $log_verbose,
|
|
test => $test,
|
|
preview => $preview,
|
|
family => $family,
|
|
confess => $confess,
|
|
update => $update,
|
|
convert => $convert,
|
|
annotate => $annotate,
|
|
directives => $directives,
|
|
config_path => $config_path,
|
|
shorewallrc => $shorewallrc,
|
|
shorewallrc1 => $shorewallrc1,
|
|
);
|