Changeset 85ae78e4e6a2069ffee336d33834a7eb84254ee1

Timestamp:

09/19/09 18:40:33 (3 years ago)

Author:

Neutron Soutmun <neo.neutron@…>

Children:

6bfc4df01c9d7a55c8cb20e27577efa910712d95

Parents:

da073f8a69753a15298bfde3407d5563594472db

git-committer:

Neutron Soutmun <neo.neutron@…> (09/19/09 18:40:33)

Message:

Yet another fix firewall script for _ext_fw

• Keep the external interfaces list in state file for inter-call process

Files:

• tools/rahunas-firewall.in (modified) (4 diffs)

tools/rahunas-firewall.in

@@ -17 +17 @@
 RUNDIR=@localstatedir@/run/rahunas-set
 VSERVER_LIST=@localstatedir@/run/rahunas-vserver
+MAIN_EXT_IFACE_LIST=@localstatedir@/run/rahunas_ext_iface_list
 
 RUN_DAEMON=no
@@ -55 +56 @@
 MAIN_EXT_IFACE_PORTS_ALLOW=`get_config_value main external_iface_ports_allow $RAHUNAS_CONFIG`
 MAIN_EXT_IFACE_PING_ACCEPT=`get_config_value main external_iface_ping_accept $RAHUNAS_CONFIG`
-MAIN_EXT_IFACE_LIST=
 
 if [ "$ENV_OVERRIDE" != "yes" ]; then
@@ -266 +266 @@
     for dev in $DEV_EXTERNAL_LIST; do
       # Filter duplicated external interfaces
-      if ! echo $MAIN_EXT_IFACE_LIST | grep $dev > /dev/null; then
-        MAIN_EXT_IFACE_LIST=`echo "$MAIN_EXT_IFACE_LIST $dev"`
+      if ! cat $MAIN_EXT_IFACE_LIST | grep $dev > /dev/null; then
+        echo "$dev" >> $MAIN_EXT_IFACE_LIST
 
         $IPTABLES $action INPUT $DEV_IN_PARAM $dev -j ${NAME}_ext_fw
@@ -273 +273 @@
     done
   else #stop
-    for dev in $MAIN_EXT_IFACE_LIST; do
+    for dev in `cat $MAIN_EXT_IFACE_LIST`; do
       $IPTABLES $action INPUT $DEV_IN_PARAM $dev -j ${NAME}_ext_fw
+      sed -i "/$dev/d" $MAIN_EXT_IFACE_LIST
     done
   fi