diff options
author | Karel Kočí <cynerd@email.cz> | 2020-11-05 11:08:59 +0100 |
---|---|---|
committer | Karel Kočí <cynerd@email.cz> | 2020-11-05 11:08:59 +0100 |
commit | 59cbf758e1965f7127e337983a4f3e38f8233e4d (patch) | |
tree | 213424910c603e85788518d9ec6b34de00623225 /sentinel-fwlogs/files/sentinel-firewall.sh | |
parent | 9aa4f21cf22502060841830300d5d02907e3f5a4 (diff) | |
download | openwrt-personal-pkgs-59cbf758e1965f7127e337983a4f3e38f8233e4d.tar.gz openwrt-personal-pkgs-59cbf758e1965f7127e337983a4f3e38f8233e4d.tar.bz2 openwrt-personal-pkgs-59cbf758e1965f7127e337983a4f3e38f8233e4d.zip |
Remove packages merged to turris-os-packages
Diffstat (limited to 'sentinel-fwlogs/files/sentinel-firewall.sh')
-rwxr-xr-x | sentinel-fwlogs/files/sentinel-firewall.sh | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/sentinel-fwlogs/files/sentinel-firewall.sh b/sentinel-fwlogs/files/sentinel-firewall.sh deleted file mode 100755 index e066b16..0000000 --- a/sentinel-fwlogs/files/sentinel-firewall.sh +++ /dev/null @@ -1,37 +0,0 @@ -#!/bin/sh -set -e -. "${0%/*}/common.sh" -. /lib/functions.sh -. /lib/functions/sentinel.sh -. /usr/libexec/sentinel/fwlogs-defaults.sh - -allowed_to_run "fwlogs" 2>/dev/null || return 0 - - -config_load "sentinel" -config_get nflog_group fwlogs nflog_group "$DEFAULT_NFLOG_GROUP" -config_get nflog_threshold fwlogs nflog_threshold "$DEFAULT_NFLOG_THRESHOLD" - - -fwlogs_logging() { - local config_section="$1" - local zone enabled - config_get zone "$config_section" "name" - config_get_bool enabled "$config_section" "sentinel_fwlogs" "0" - [ "$enabled" = "1" ] || return 0 - - report_operation "Logging of zone '$zone'" - for fate in DROP REJECT; do - local chain="zone_${zone}_src_${fate}" - iptables_chain_exists "$chain" || continue - report_info "$fate" - iptables -I "$chain" 1 \ - -m comment --comment "!sentinel: fwlogs" \ - -j NFLOG \ - --nflog-group "$nflog_group" \ - --nflog-threshold "$nflog_threshold" - done -} - -config_load "firewall" -config_foreach fwlogs_logging "zone" |