forked from extern/shorewall_code
161 lines
3.4 KiB
Bash
Executable File
161 lines
3.4 KiB
Bash
Executable File
#!/bin/sh
|
|
### BEGIN INIT INFO
|
|
# Provides: shorewall
|
|
# Required-Start: $network $remote_fs
|
|
# Required-Stop: $network $remote_fs
|
|
# Default-Start: S
|
|
# Default-Stop: 0 1 6
|
|
# Short-Description: Configure the firewall at boot time
|
|
# Description: Configure the firewall according to the rules specified in
|
|
# /etc/shorewall
|
|
### END INIT INFO
|
|
|
|
. /lib/lsb/init-functions
|
|
|
|
SRWL=/sbin/shorewall
|
|
SRWL_OPTS="-tvv"
|
|
WAIT_FOR_IFUP=/usr/share/shorewall/wait4ifup
|
|
test -n ${INITLOG:=/var/log/shorewall-init.log}
|
|
|
|
test -x $SRWL || exit 0
|
|
test -x $WAIT_FOR_IFUP || exit 0
|
|
test -n "$INITLOG" || {
|
|
echo "INITLOG cannot be empty, please configure $0" ;
|
|
exit 1;
|
|
}
|
|
|
|
if [ "$(id -u)" != "0" ]
|
|
then
|
|
echo "You must be root to start, stop or restart \"Shorewall firewall\"."
|
|
exit 1
|
|
fi
|
|
|
|
echo_notdone () {
|
|
|
|
if [ "$INITLOG" = "/dev/null" ] ; then
|
|
echo "not done."
|
|
else
|
|
echo "not done (check $INITLOG)."
|
|
fi
|
|
|
|
exit 1
|
|
}
|
|
|
|
not_configured () {
|
|
echo "#### WARNING ####"
|
|
echo "The firewall won't be started/stopped unless it is configured"
|
|
if [ "$1" != "stop" ]
|
|
then
|
|
echo ""
|
|
echo "Please read about Debian specific customization in"
|
|
echo "/usr/share/doc/shorewall/README.Debian.gz."
|
|
fi
|
|
echo "#################"
|
|
exit 0
|
|
}
|
|
|
|
#
|
|
# The installer may alter this
|
|
#
|
|
. /usr/share/shorewall/shorewallrc
|
|
|
|
# check if shorewall is configured or not
|
|
if [ -f "${SYSCONFDIR}/shorewall" ]
|
|
then
|
|
. ${SYSCONFDIR}/shorewall
|
|
SRWL_OPTS="$SRWL_OPTS $OPTIONS"
|
|
if [ "$startup" != "1" ]
|
|
then
|
|
not_configured
|
|
fi
|
|
else
|
|
not_configured
|
|
fi
|
|
|
|
[ "$INITLOG" = "/dev/null" ] && SHOREWALL_INIT_SCRIPT=1 || SHOREWALL_INIT_SCRIPT=0
|
|
|
|
export SHOREWALL_INIT_SCRIPT
|
|
|
|
# wait for an unconfigured interface
|
|
wait_for_pppd () {
|
|
if [ "$wait_interface" != "" ]
|
|
then
|
|
for i in $wait_interface
|
|
do
|
|
$WAIT_FOR_IFUP $i 90
|
|
done
|
|
fi
|
|
}
|
|
|
|
# start the firewall
|
|
shorewall_start () {
|
|
printf "Starting \"Shorewall firewall\": "
|
|
wait_for_pppd
|
|
$SRWL $SRWL_OPTS start $STARTOPTIONS >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
return 0
|
|
}
|
|
|
|
# stop the firewall
|
|
shorewall_stop () {
|
|
if [ "$SAFESTOP" = 1 ]; then
|
|
printf "Stopping \"Shorewall firewall\": "
|
|
$SRWL $SRWL_OPTS stop >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
else
|
|
printf "Clearing all \"Shorewall firewall\" rules: "
|
|
$SRWL $SRWL_OPTS clear >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
# reload the firewall
|
|
shorewall_reload () {
|
|
printf "Reloading \"Shorewall firewall\": "
|
|
$SRWL $SRWL_OPTS restart $RELOADOPTIONS >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
return 0
|
|
}
|
|
|
|
# restart the firewall
|
|
shorewall_restart () {
|
|
printf "Restarting \"Shorewall firewall\": "
|
|
$SRWL $SRWL_OPTS restart $RESTARTOPTIONS >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
return 0
|
|
}
|
|
|
|
# refresh the firewall
|
|
shorewall_refresh () {
|
|
printf "Refreshing \"Shorewall firewall\": "
|
|
$SRWL $SRWL_OPTS refresh >> $INITLOG 2>&1 && echo "done." || echo_notdone
|
|
return 0
|
|
}
|
|
|
|
# status of the firewall
|
|
shorewall_status () {
|
|
$SRWL $SRWL_OPTS status && exit 0 || exit $?
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
shorewall_start
|
|
;;
|
|
stop)
|
|
shorewall_stop
|
|
;;
|
|
refresh)
|
|
shorewall_refresh
|
|
;;
|
|
restart)
|
|
shorewall_restart
|
|
;;
|
|
force-reload|reload)
|
|
shorewall_reload
|
|
;;
|
|
status)
|
|
shorewall_status
|
|
;;
|
|
*)
|
|
echo "Usage: /etc/init.d/shorewall {start|stop|refresh|reload|restart|force-reload|status}"
|
|
exit 1
|
|
esac
|
|
|
|
exit 0
|