nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-16 13:38:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add iptables chain add and exit functions

Browse Source
This commit is contained in:
FusionPBX
2022-11-17 21:59:46 -07:00
committed by GitHub
parent ff2aa6a5db
commit 440883fba8
1 changed files with 39 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
app/event_guard/resources/service/event_guard.php
View File

@@ -83,15 +83,7 @@
//loop through the chains
if (is_array($chains)) {
foreach ($chains as $chain) {
$command = "iptables --list INPUT --numeric | grep ".$chain." | awk '{print \$1}' | sed ':a;N;\$!ba;s/\\n/,/g' ";
//if ($debug) { echo $command."\n"; }
$response = shell($command);
if (!in_array($chain, explode(",", $response))) {
echo "Add iptables ".$chain." chain\n";
system('iptables --new '.$chain);
system('iptables -I INPUT -j '.$chain);
echo "\n";
}
iptables_chain_add($chain);
}
}
}
@@ -651,4 +643,42 @@
return $allowed;
}
//add IP table chains
function iptables_chain_add($chain) {
//if the chain exists return true
if (iptables_chain_exists($chain)) {
echo "IPtables ".$chain." chain already exists\n";
return true;
}
//log info to the console
echo "Add iptables ".$chain." chain\n";
//add the chain
system('iptables --new '.$chain);
system('iptables -I INPUT -j '.$chain);
//check if the chain exists
if (iptables_chain_exists($chain)) {
return true;
}
else {
sleep(1);
iptables_chain_add($chain);
}
}
//check if the iptables chain exists
function iptables_chain_exists($chain) {
$command = "iptables --list INPUT --numeric | grep ".$chain." | awk '{print \$1}' | sed ':a;N;\$!ba;s/\\n/,/g' ";
//if ($debug) { echo $command."\n"; }
$response = shell($command);
if (in_array($chain, explode(",", $response))) {
return true;
}
else {
return false;
}
}
?>