mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2025-10-30 18:06:35 +01:00
90 lines
3.0 KiB
Python
90 lines
3.0 KiB
Python
|
import subprocess
|
||
|
|
import shlex
|
||
|
|
|
||
|
|
class FirewallUtilities:
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def doCommand(command):
|
||
|
|
import install as inst
|
||
|
|
try:
|
||
|
|
cmd = shlex.split(command)
|
||
|
|
res = subprocess.call(cmd)
|
||
|
|
if inst.preFlightsChecks.resFailed(inst.get_distro(), res):
|
||
|
|
inst.preFlightsChecks.stdOut("Failed to apply rule: " + command + " Error #" + str(res), 1)
|
||
|
|
return 0
|
||
|
|
|
||
|
|
except OSError as msg:
|
||
|
|
inst.preFlightsChecks.stdOut("Failed to apply rule: " + command + " Error: " + str(msg), 1)
|
||
|
|
return 0
|
||
|
|
except ValueError as msg:
|
||
|
|
inst.preFlightsChecks.stdOut("Failed to apply rule: " + command + " Error: " + str(msg), 1)
|
||
|
|
return 0
|
||
|
|
|
||
|
|
return 1
|
||
|
|
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def addRule(proto,port):
|
||
|
|
|
||
|
|
print('Adding port: %s' % (port))
|
||
|
|
|
||
|
|
if port == "21":
|
||
|
|
command = "sudo firewall-cmd --add-service=ftp --permanent"
|
||
|
|
else:
|
||
|
|
ipAddress = "0.0.0.0/0"
|
||
|
|
ruleFamily = 'rule family="ipv4"'
|
||
|
|
sourceAddress = 'source address="' + ipAddress + '"'
|
||
|
|
ruleProtocol = 'port protocol="' + proto + '"'
|
||
|
|
rulePort = 'port="' + port + '"'
|
||
|
|
|
||
|
|
command = "sudo firewall-cmd --permanent --zone=public --add-rich-rule='" + ruleFamily + " " + sourceAddress + " " + ruleProtocol + " " + rulePort + " " + "accept'"
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
ruleFamily = 'rule family="ipv6"'
|
||
|
|
sourceAddress = ''
|
||
|
|
|
||
|
|
command = "sudo firewall-cmd --permanent --zone=public --add-rich-rule='" + ruleFamily + " " + sourceAddress + " " + ruleProtocol + " " + rulePort + " " + "accept'"
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
command = 'sudo firewall-cmd --reload'
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
return 1
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def deleteRule(proto, port):
|
||
|
|
|
||
|
|
if port=="21":
|
||
|
|
command = "sudo firewall-cmd --remove-service=ftp --permanent"
|
||
|
|
else:
|
||
|
|
ipAddress = "0.0.0.0/0"
|
||
|
|
ruleFamily = 'rule family="ipv4"'
|
||
|
|
sourceAddress = 'source address="' + ipAddress + '"'
|
||
|
|
ruleProtocol = 'port protocol="' + proto + '"'
|
||
|
|
rulePort = 'port="' + port + '"'
|
||
|
|
|
||
|
|
command = "sudo firewall-cmd --permanent --zone=public --remove-rich-rule='" + ruleFamily + " " + sourceAddress + " " + ruleProtocol + " " + rulePort + " " + "accept'"
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
ruleFamily = 'rule family="ipv6"'
|
||
|
|
sourceAddress = ''
|
||
|
|
|
||
|
|
command = "sudo firewall-cmd --permanent --zone=public --remove-rich-rule='" + ruleFamily + " " + sourceAddress + " " + ruleProtocol + " " + rulePort + " " + "accept'"
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
command = 'sudo firewall-cmd --reload'
|
||
|
|
|
||
|
|
if not FirewallUtilities.doCommand(command):
|
||
|
|
return 0
|
||
|
|
|
||
|
|
return 1
|