forked from norman/fusionpbx-install.sh-github-mirror
5a2f3521cb
* added CentOS, Fedora, RHEL choices with minimal version check (recommited) * fixed small typos * added special option --use-php5-package * parse options and export new environment variable USE_PHP5_PACKAGE * added choice between php5* or php7.0* packages (recommited) * fixed php*-fpm service name and php.ini file path (recommited) * prepare socket name for nginx to work with php5-fpm or php7.0-fpm (recommited) * added ppa:ondrej/php5-compat repo * added dependency ppa:ondrej/php repo and package software-properties-common * added execute permissions to ./centos/*.sh files
34 lines
2.3 KiB
Bash
Executable File
34 lines
2.3 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
#move to script directory so all relative paths work
|
|
cd "$(dirname "$0")"
|
|
|
|
. ./colors.sh
|
|
. ./arguments.sh
|
|
|
|
verbose "Configuring FirewallD"
|
|
#ssh should be on by default
|
|
|
|
firewall-cmd --permanent --zone=public --add-service={http,https}
|
|
firewall-cmd --permanent --zone=public --add-port={5060,5061,5080,5081}/udp
|
|
firewall-cmd --permanent --zone=public --add-port={5060,5061,5080,5081}/tcp
|
|
firewall-cmd --permanent --zone=public --add-port=16384-32768/udp
|
|
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5060:5061 -m string --string "friendly-scanner" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5060:5061 -m string --string "sipcli/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5060:5061 -m string --string "VaxSIPUserAgent/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5060:5061 -m string --string "friendly-scanner" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5060:5061 -m string --string "sipcli/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5060:5061 -m string --string "VaxSIPUserAgent/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5080:5081 -m string --string "friendly-scanner" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5080:5081 -m string --string "sipcli/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p udp --dport 5080:5081 -m string --string "VaxSIPUserAgent/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5080:5081 -m string --string "friendly-scanner" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5080:5081 -m string --string "sipcli/" --algo bm -j DROP
|
|
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 5080:5081 -m string --string "VaxSIPUserAgent/" --algo bm -j DROP
|
|
firewall-cmd --add-service openvpn
|
|
firewall-cmd --permanent --add-service openvpn
|
|
firewall-cmd --reload
|
|
|
|
verbose "FirewallD configured"
|