aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support/sshguard/sshguard/firewall
blob: b6833681ec47cb48fb48cbae99087c48b3842de6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
#!/bin/sh

#
# Function that enables firewall
#
do_enable_firewall()
{
	# creating sshguard chain
	iptables -N sshguard 2> /dev/null
	ip6tables -N sshguard 2> /dev/null
	# block traffic from abusers
	iptables -I INPUT -j sshguard 2> /dev/null
	ip6tables -I INPUT -j sshguard 2> /dev/null
}
#
# Function that disables firewall
#
do_disable_firewall()
{
	# flushes list of abusers
	iptables -F sshguard 2> /dev/null
	ip6tables -F sshguard 2> /dev/null
	# removes sshguard firewall rules
	iptables -D INPUT -j sshguard 2> /dev/null
	ip6tables -D INPUT -j sshguard 2> /dev/null
	# removing sshguard chain
	iptables -X sshguard 2> /dev/null
	ip6tables -X sshguard 2> /dev/null
}

case "$1" in
    enable)
	do_enable_firewall
	;;
    disable)
	do_disable_firewall
	;;
    restart)
	do_disable_firewall
	do_enable_firewall
	;;
    *)
	exit 1
	;;
esac
	
exit 0