Add support of "/{udp,tcp,proto}" suffix into $firewall_myservices, which
interpreted the listed items as port numbers of TCP services. A service with no suffix still works and recognized as a TCP service for backward compatibility. It should be updated with /tcp suffix. PR: 194292 MFC after: 1 week
This commit is contained in:
parent
0b43817eac
commit
544d3b859e
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=273201
@ -422,8 +422,8 @@ case ${firewall_type} in
|
|||||||
|
|
||||||
[Ww][Oo][Rr][Kk][Ss][Tt][Aa][Tt][Ii][Oo][Nn])
|
[Ww][Oo][Rr][Kk][Ss][Tt][Aa][Tt][Ii][Oo][Nn])
|
||||||
# Configuration:
|
# Configuration:
|
||||||
# firewall_myservices: List of TCP ports on which this host
|
# firewall_myservices: List of ports/protocols on which this
|
||||||
# offers services.
|
# host offers services.
|
||||||
# firewall_allowservices: List of IPv4 and/or IPv6 addresses
|
# firewall_allowservices: List of IPv4 and/or IPv6 addresses
|
||||||
# that have access to
|
# that have access to
|
||||||
# $firewall_myservices.
|
# $firewall_myservices.
|
||||||
@ -487,7 +487,24 @@ case ${firewall_type} in
|
|||||||
#
|
#
|
||||||
for i in ${firewall_allowservices} ; do
|
for i in ${firewall_allowservices} ; do
|
||||||
for j in ${firewall_myservices} ; do
|
for j in ${firewall_myservices} ; do
|
||||||
${fwcmd} add pass tcp from $i to me $j
|
case $j in
|
||||||
|
[0-9A-Za-z]*/[Pp][Rr][Oo][Tt][Oo])
|
||||||
|
${fwcmd} add pass ${j%/[Pp][Rr][Oo][Tt][Oo]} from $i to me
|
||||||
|
;;
|
||||||
|
[0-9A-Za-z]*/[Tt][Cc][Pp])
|
||||||
|
${fwcmd} add pass tcp from $i to me ${j%/[Tt][Cc][Pp]}
|
||||||
|
;;
|
||||||
|
[0-9A-Za-z]*/[Uu][Dd][Pp])
|
||||||
|
${fwcmd} add pass udp from $i to me ${j%/[Uu][Dd][Pp]}
|
||||||
|
;;
|
||||||
|
*[0-9A-Za-z])
|
||||||
|
echo "Consider using tcp/$j in firewall_myservices." > /dev/stderr
|
||||||
|
${fwcmd} add pass tcp from $i to me $j
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Invalid port in firewall_myservices: $j" > /dev/stderr
|
||||||
|
;;
|
||||||
|
esac
|
||||||
done
|
done
|
||||||
done
|
done
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user