From 2f31048b9123444aed7559b72c56645d73379e4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Karel=20Ko=C4=8D=C3=AD?= <cynerd@email.cz>
Date: Sat, 11 Jul 2020 16:06:13 +0200
Subject: sentinel-minipot: include latest turris-os-version

---
 sentinel-minipot/files/sentinel-firewall.sh | 33 +++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 sentinel-minipot/files/sentinel-firewall.sh

(limited to 'sentinel-minipot/files/sentinel-firewall.sh')

diff --git a/sentinel-minipot/files/sentinel-firewall.sh b/sentinel-minipot/files/sentinel-firewall.sh
new file mode 100644
index 0000000..9c51268
--- /dev/null
+++ b/sentinel-minipot/files/sentinel-firewall.sh
@@ -0,0 +1,33 @@
+#!/bin/sh
+set -e
+SF_DIR="${0%/*}"
+. "$SF_DIR/common.sh"
+. /lib/functions.sh
+. /lib/functions/sentinel.sh
+
+allowed_to_run "minipot" 2>/dev/null || return 0
+
+
+config_load "sentinel"
+config_get telnet_port "minipot" "telnet_port" "2333"
+
+
+port_redirect_zone() {
+	local config_section="$1"
+	local zone enabled
+	config_get zone "$config_section" "name"
+	config_get_bool enabled "$config_section" "sentinel_minipot" "0"
+	[ "$enabled" = "1" ] || return 0
+
+	[ "$telnet_port" = "0" ] || \
+		iptables_redirect "$zone" 23 "$telnet_port" "Minipot Telnet"
+}
+
+config_load "firewall"
+config_foreach port_redirect_zone "zone"
+
+
+if source_if_exists "$SF_DIR/dynfw-utils.sh"; then
+	[ "$telnet_port" = "0" ] || \
+		bypass_dynamic_firewall "tcp" "23" "Minipot Telnet"
+fi
-- 
cgit v1.2.3