forked from extern/shorewall_code
ad06133e3b
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6621 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
142 lines
4.0 KiB
Perl
142 lines
4.0 KiB
Perl
#! /usr/bin/perl -w
|
|
#
|
|
# Tool for building tables used to validate protocol and service names in Shorewall rules.
|
|
#
|
|
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of Version 2 of the GNU General Public License
|
|
# as published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
|
#
|
|
# Usage:
|
|
#
|
|
# buildports.pl [ <directory> ] > /usr/share/shorewall-perl/Shorewall/Ports.pm
|
|
#
|
|
# Where:
|
|
#
|
|
# <directory> is the directory where the 'protocols' and 'services' files are
|
|
# located. If not specified, /etc is assumed.
|
|
#
|
|
use strict;
|
|
use lib '/usr/share/shorewall-perl';
|
|
use Shorewall::Common;
|
|
use Shorewall::Config;
|
|
|
|
our $offset = "\t\t ";
|
|
|
|
our %service_hash;
|
|
|
|
sub print_it( $$ ) {
|
|
my ( $name, $number ) = @_;
|
|
my $tabs;
|
|
my $length = length $name;
|
|
|
|
if ( $name =~ /[-.]/ ) {
|
|
$tabs = "\t" x int ( ( 27 - $length ) / 8 );
|
|
print "${offset}'${name}'${tabs}=> $number,\n";
|
|
} else {
|
|
$tabs = "\t" x int ( ( 29 - $length ) / 8 );
|
|
print "${offset}${name}${tabs}=> $number,\n";
|
|
}
|
|
}
|
|
|
|
sub print_service( $$ ) {
|
|
my ( $service, $number ) = @_;
|
|
|
|
unless ( exists $service_hash{$service} ) {
|
|
print_it( $service, $number );
|
|
$service_hash{$service} = $number;
|
|
}
|
|
}
|
|
|
|
set_shorewall_dir($ARGV[0] || '/etc');
|
|
|
|
ensure_config_path;
|
|
|
|
our $date = localtime;
|
|
|
|
print <<"EOF";
|
|
#
|
|
# Shorewall-perl 4.0 -- /usr/share/shorewall-perl/Shorewall/Ports.pm
|
|
#
|
|
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
|
#
|
|
# (c) 2007 - Tom Eastep (teastep\@shorewall.net)
|
|
#
|
|
# Complete documentation is available at http://shorewall.net
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of Version 2 of the GNU General Public License
|
|
# as published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
|
#
|
|
# This module is responsible for lower level configuration file handling.
|
|
# It also exports functions for generating warning and error messages.
|
|
# The get_configuration function parses the shorewall.conf, capabilities and
|
|
# modules files during compiler startup.
|
|
#
|
|
#
|
|
# Protocol and Services module generated using buildports.pl - $date
|
|
#
|
|
EOF
|
|
|
|
print<<'EOF';
|
|
package Shorewall::Ports;
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
our @ISA = qw(Exporter);
|
|
our @EXPORT = qw( %protocols %services );
|
|
our @EXPORT_OK = qw();
|
|
our @VERSION = 1.00;
|
|
|
|
our %protocols = (
|
|
EOF
|
|
|
|
open_file 'protocols' or fatal_error "Cannot open protocols: $!";
|
|
|
|
while ( read_a_line1 ) {
|
|
my ( $proto1, $number, $proto2, $proto3 ) = split_line( 2, 4, '/etc/protocols entry');
|
|
|
|
print_it( $proto1, $number );
|
|
print_it( $proto2, $number ) unless $proto2 eq '-' || $proto3 ne '-';
|
|
}
|
|
|
|
print "\t\t );\n\n";
|
|
|
|
print "our \%services = (\n";
|
|
|
|
open_file 'services' or fatal_error "Cannot open services: $!";
|
|
|
|
while ( read_a_line1 ) {
|
|
my ( $name1, $proto_number, @names ) = split_line( 2, 10, '/etc/services entry');
|
|
|
|
my ( $number, $proto ) = split '/', $proto_number;
|
|
|
|
print_service( $name1 , $number );
|
|
|
|
while ( defined ( $name1 = shift @names ) && $name1 ne '-' ) {
|
|
print_service ($name1, $number );
|
|
}
|
|
}
|
|
|
|
print "\t\t );\n\n1;\n";
|