Gecko [ contributie.vriendennsm.nl ]

Name	Size	Permission	Date
help	[ DIR ]	drwxr-xr-x	2026-07-25 20:55
images	[ DIR ]	drwxr-xr-x	2026-07-25 20:55
lang	[ DIR ]	drwxr-xr-x	2026-07-25 20:55
CHANGELOG	2.79 KB	-rw-r--r--	2026-07-17 21:17
acl_security.pl	1.02 KB	-rwxr-xr-x	2026-07-17 21:17
apply.cgi	512 B	-rwxr-xr-x	2026-07-17 21:22
backup_config.pl	649 B	-rwxr-xr-x	2026-07-17 21:17
bootup.cgi	600 B	-rwxr-xr-x	2026-07-17 21:22
cgi_args.pl	430 B	-rwxr-xr-x	2026-07-17 21:17
cluster.cgi	2.08 KB	-rwxr-xr-x	2026-07-17 21:22
cluster_add.cgi	2.19 KB	-rwxr-xr-x	2026-07-17 21:22
cluster_delete.cgi	651 B	-rwxr-xr-x	2026-07-17 21:22
coherent-linux-lib.pl	1.54 KB	-rwxr-xr-x	2026-07-17 21:17
config	83 B	-rw-r--r--	2026-07-17 21:17
config.info	1.24 KB	-rw-r--r--	2026-07-17 21:17
config.info.bg	2.48 KB	-rw-r--r--	2026-07-17 21:17
config.info.ca	1.5 KB	-rw-r--r--	2026-07-17 21:17
config.info.cs	982 B	-rw-r--r--	2026-07-17 21:17
config.info.de	1.42 KB	-rw-r--r--	2026-07-17 21:17
config.info.fr	1.63 KB	-rw-r--r--	2026-07-17 21:17
config.info.ja	421 B	-rw-r--r--	2026-07-17 21:17
config.info.nl	976 B	-rw-r--r--	2026-07-17 21:17
config.info.no	968 B	-rw-r--r--	2026-07-17 21:17
config.info.pl	1012 B	-rw-r--r--	2026-07-17 21:17
config.info.pt_BR	983 B	-rw-r--r--	2026-07-17 21:17
config.info.ru	1.31 KB	-rw-r--r--	2026-07-17 21:17
config.info.sk	989 B	-rw-r--r--	2026-07-17 21:17
config.info.tr	827 B	-rw-r--r--	2026-07-17 21:17
convert.cgi	756 B	-rwxr-xr-x	2026-07-17 21:22
debian-linux-lib.pl	4.74 KB	-rwxr-xr-x	2026-07-17 21:17
defaultacl	100 B	-rw-r--r--	2026-07-17 21:17
edit_rule.cgi	15.04 KB	-rwxr-xr-x	2026-07-17 21:22
firewall-lib.pl	17.41 KB	-rwxr-xr-x	2026-07-17 21:17
firewall4-lib.pl	1.82 KB	-rwxr-xr-x	2026-07-17 21:17
firewall6-lib.pl	1.76 KB	-rwxr-xr-x	2026-07-17 21:17
gentoo-linux-lib.pl	722 B	-rwxr-xr-x	2026-07-17 21:17
index.cgi	16.08 KB	-rwxr-xr-x	2026-07-17 21:22
install_check.pl	841 B	-rwxr-xr-x	2026-07-17 21:17
log_parser.pl	835 B	-rwxr-xr-x	2026-07-17 21:17
mandrake-linux-lib.pl	1.69 KB	-rwxr-xr-x	2026-07-17 21:17
module.info	218 B	-rw-r--r--	2026-07-17 21:17
module.info.ar	0 B	-rw-r--r--	2026-07-17 21:17
module.info.ar.auto	258 B	-rw-r--r--	2026-07-17 21:17
module.info.bg	0 B	-rw-r--r--	2026-07-17 21:17
module.info.bg.auto	292 B	-rw-r--r--	2026-07-17 21:17
module.info.ca	150 B	-rw-r--r--	2026-07-17 21:17
module.info.ca.auto	17 B	-rw-r--r--	2026-07-17 21:17
module.info.cs	24 B	-rw-r--r--	2026-07-17 21:17
module.info.cs.auto	148 B	-rw-r--r--	2026-07-17 21:17
module.info.da	0 B	-rw-r--r--	2026-07-17 21:17
module.info.da.auto	167 B	-rw-r--r--	2026-07-17 21:17
module.info.de	155 B	-rw-r--r--	2026-07-17 21:17
module.info.de.auto	17 B	-rw-r--r--	2026-07-17 21:17
module.info.el	0 B	-rw-r--r--	2026-07-17 21:17
module.info.el.auto	331 B	-rw-r--r--	2026-07-17 21:17
module.info.es	26 B	-rw-r--r--	2026-07-17 21:17
module.info.es.auto	149 B	-rw-r--r--	2026-07-17 21:17
module.info.eu	0 B	-rw-r--r--	2026-07-17 21:17
module.info.eu.auto	160 B	-rw-r--r--	2026-07-17 21:17
module.info.fa	0 B	-rw-r--r--	2026-07-17 21:17
module.info.fa.auto	272 B	-rw-r--r--	2026-07-17 21:17
module.info.fi	0 B	-rw-r--r--	2026-07-17 21:17
module.info.fi.auto	192 B	-rw-r--r--	2026-07-17 21:17
module.info.fr	0 B	-rw-r--r--	2026-07-17 21:17
module.info.fr.auto	173 B	-rw-r--r--	2026-07-17 21:17
module.info.hr	0 B	-rw-r--r--	2026-07-17 21:17
module.info.hr.auto	166 B	-rw-r--r--	2026-07-17 21:17
module.info.hu	33 B	-rw-r--r--	2026-07-17 21:17
module.info.hu.auto	172 B	-rw-r--r--	2026-07-17 21:17
module.info.it	0 B	-rw-r--r--	2026-07-17 21:17
module.info.it.auto	167 B	-rw-r--r--	2026-07-17 21:17
module.info.ja	39 B	-rw-r--r--	2026-07-17 21:17
module.info.ja.auto	218 B	-rw-r--r--	2026-07-17 21:17
module.info.ko	0 B	-rw-r--r--	2026-07-17 21:17
module.info.ko.auto	198 B	-rw-r--r--	2026-07-17 21:17
module.info.ms	158 B	-rw-r--r--	2026-07-17 21:17
module.info.ms.auto	17 B	-rw-r--r--	2026-07-17 21:17
module.info.nl	23 B	-rw-r--r--	2026-07-17 21:17
module.info.nl.auto	157 B	-rw-r--r--	2026-07-17 21:17
module.info.no	23 B	-rw-r--r--	2026-07-17 21:17
module.info.no.auto	146 B	-rw-r--r--	2026-07-17 21:17
module.info.pl	141 B	-rw-r--r--	2026-07-17 21:17
module.info.pl.auto	23 B	-rw-r--r--	2026-07-17 21:17
module.info.pt	0 B	-rw-r--r--	2026-07-17 21:17
module.info.pt.auto	170 B	-rw-r--r--	2026-07-17 21:17
module.info.pt_BR	26 B	-rw-r--r--	2026-07-17 21:17
module.info.pt_BR.auto	150 B	-rw-r--r--	2026-07-17 21:17
module.info.ru	51 B	-rw-r--r--	2026-07-17 21:17
module.info.ru.auto	241 B	-rw-r--r--	2026-07-17 21:17
module.info.sk	24 B	-rw-r--r--	2026-07-17 21:17
module.info.sk.auto	174 B	-rw-r--r--	2026-07-17 21:17
module.info.sv	0 B	-rw-r--r--	2026-07-17 21:17
module.info.sv.auto	174 B	-rw-r--r--	2026-07-17 21:17
module.info.tr	0 B	-rw-r--r--	2026-07-17 21:17
module.info.tr.auto	215 B	-rw-r--r--	2026-07-17 21:17
module.info.uk	0 B	-rw-r--r--	2026-07-17 21:17
module.info.uk.auto	277 B	-rw-r--r--	2026-07-17 21:17
module.info.zh	0 B	-rw-r--r--	2026-07-17 21:17
module.info.zh.auto	145 B	-rw-r--r--	2026-07-17 21:17
module.info.zh_TW	0 B	-rw-r--r--	2026-07-17 21:17
module.info.zh_TW.auto	154 B	-rw-r--r--	2026-07-17 21:17
move.cgi	1.29 KB	-rwxr-xr-x	2026-07-17 21:22
newchain.cgi	898 B	-rwxr-xr-x	2026-07-17 21:22
open-ports.pl	3.4 KB	-rwxr-xr-x	2026-07-17 21:22
prefs.info	55 B	-rw-r--r--	2026-07-17 21:17
redhat-linux-lib.pl	2.16 KB	-rwxr-xr-x	2026-07-17 21:17
save_policy.cgi	7.15 KB	-rwxr-xr-x	2026-07-17 21:22
save_rule.cgi	12.4 KB	-rwxr-xr-x	2026-07-17 21:22
save_rule6.cgi	12.11 KB	-rwxr-xr-x	2026-07-17 21:22
setup.cgi	9.46 KB	-rwxr-xr-x	2026-07-17 21:22
setup6.cgi	8.21 KB	-rwxr-xr-x	2026-07-17 21:22
trustix-linux-lib.pl	2.16 KB	-rwxr-xr-x	2026-07-17 21:17
unapply.cgi	609 B	-rwxr-xr-x	2026-07-17 21:22

Rename

#!/usr/bin/perl
# Open some ports on the firewall. Exit statuses are :
# 0 - Nothing needed to be done
# 1 - Given ports were opened up
# 2 - IPtables is not installed or supported
# 3 - No firewall is active
# 4 - Could not apply configuration
# 5 - Bad args

$no_acl_check++;
$ENV{'WEBMIN_CONFIG'} = "/etc/webmin";
$ENV{'WEBMIN_VAR'} = "/var/webmin";
if ($0 =~ /^(.*\/)[^\/]+$/) {
	chdir($1);
	}
require './firewall-lib.pl';
if ($module_name ne 'firewall') {
	print STDERR "Command must be run with full path\n";
	exit(5);
	}

# Parse args
if ($ARGV[0] eq "--no-apply") {
	$no_apply = 1;
	shift(@ARGV);
	}
if (!@ARGV) {
	print STDERR "Missing ports to open\n";
	exit(5);
	}
foreach $p (@ARGV) {
	if ($p !~ /^\d+$/ && $p !~ /^\d+:\d+$/ && $p !~ /^\d+(,\d+)*$/) {
		print STDERR "Port $p must be number or start:end range\n";
		exit(5);
		}
	}

# Check IPtables support
if (&foreign_installed($module_name, 1) != 2) {
	print STDERR "IPtables is not available\n";
	exit(2);
	}

# Check if any rules exist
@tables = &get_iptables_save();
if (!@tables) {
	print STDERR "No IPtables rules exist yet\n";
	exit(3);
	}
($filter) = grep { $_->{'name'} eq 'filter' } @tables;
if (!$filter) {
	print STDERR "No IPtables filter table found\n";
	exit(3);
	}
elsif (!@{$filter->{'rules'}}) {
	print STDERR "No IPtables rules found in filter table\n";
	exit(3);
	}

# Check if any rules are active
@livetables = &get_iptables_save("iptables-save 2>/dev/null |");
($livefilter) = grep { $_->{'name'} eq 'filter' } @livetables;

@added = ( );
PORT: foreach $p (@ARGV) {
	# For each port, find existing rules
	print STDERR "Checking for port $p ..\n";
	foreach $r (@{$filter->{'rules'}}) {
		if ($r->{'chain'} eq 'INPUT' &&
		    $r->{'j'} && $r->{'j'}->[1] eq 'ACCEPT' &&
		    $r->{'p'} && $r->{'p'}->[0] eq '' &&
		    		 $r->{'p'}->[1] eq 'tcp') {
			# Found tcp rule .. check ports
			@rports = ( );
			$rrange = undef;
			if ($r->{'dports'} && $r->{'dports'}->[0] eq '') {
				push(@rports, split(/,/, $r->{'dports'}->[1]));
				$rrange = $r->{'dports'}->[1];
				}
			if ($r->{'dport'} && $r->{'dport'}->[0] eq '') {
				($s, $e) = split(":", $r->{'dport'}->[1]);
				if ($s && $e) {
					push(@rports, ($s .. $e));
					}
				elsif ($s) {
					push(@rports, $s);
					}
				$rrange = $r->{'dport'}->[1];
				}
			if (&indexof($p, @rports) >= 0 ||
			    $p eq $rrange) {
				print STDERR ".. already allowed\n";
				next PORT;
				}
			}
		}

# Add a rule at the top for this port
	$r = { 'chain' => 'INPUT',
	       'm' => [ [ "", "tcp" ] ],
	       'p' => [ "", "tcp" ],
	       'j' => [ "", 'ACCEPT' ] };
	if ($p =~ /,/) {
		$r->{'dports'} = [ "", $p ];
		push(@{$r->{'m'}}, [ "", "multiport" ]);
		}
	else {
		$r->{'dport'} = [ "", $p ];
		}
	unshift(@{$filter->{'rules'}}, $r);
	push(@added, $p);
	}

if (@added) {
	# Added some rules .. save them
	&run_before_command();
	&lock_file($iptables_save_file);
	&save_table($filter);
	&unlock_file($iptables_save_file);
	&run_after_command();
	&copy_to_cluster();
	print STDERR "Opened ports ",join(" ", @added),"\n";

# Apply, if live
	$ex = 1;
	if (!$no_apply && $livefilter && @{$livefilter->{'rules'}}) {
		$err = &apply_configuration();
		if ($err) {
			print "Failed to apply configuration : $err\n";
			$ex = 4;
			}
		else {
			print "Applied configuration successfully\n";
			}
		}
	&webmin_log("openports", undef, undef, { 'ports' => \@added });
	exit($ex);
	}
else {
	print STDERR "All ports are already open\n";
	exit(0);
	}