1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
# redhat-linux-lib.pl
# Deal with redhat's /etc/sysconfig/iptables save file and startup script
&foreign_require("init", "init-lib.pl");
$init_script = "$init::config{'init_dir'}/iptables";
# check_iptables()
# Returns an error message if something is wrong with iptables on this system
sub check_iptables
{
if (!-r $init_script) {
return &text('coherent_escript', "<tt>$init_script</tt>");
}
local $out = `$init_script status 2>&1`;
if ($out !~ /table:|INPUT|FORWARD|OUTPUT/) {
return &text('coherent_eoutput', "<tt>$init_script status</tt>");
}
return undef;
}
$iptables_save_file = "/etc/sysconfig/iptables";
# apply_iptables()
# Applies the current iptables configuration from the save file
sub apply_iptables
{
local $out = &backquote_logged("cd / ; $init_script restart 2>&1");
$out =~ s/\033[^m]+m//g;
return $? || $out =~ /FAILED/ ? "<pre>$out</pre>" : undef;
}
# unapply_iptables()
# Writes the current iptables configuration to the save file
sub unapply_iptables
{
$out = &backquote_logged("cd / ; $init_script save 2>&1 </dev/null");
$out =~ s/\033[^m]+m//g;
return $? || $out =~ /FAILED/ ? "<pre>$out</pre>" : undef;
}
# started_at_boot()
sub started_at_boot
{
return &init::action_status("iptables") == 2;
}
sub enable_at_boot
{
&init::enable_at_boot("iptables"); # Assumes init script exists
}
sub disable_at_boot
{
&init::disable_at_boot("iptables");
}
1;
|
