arif/xcat-core
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

#4572, post scripts configfirewall for ubuntu is NOT implemented.

Browse Source
This commit is contained in:
Leo.C.Wu 2015-02-15 15:20:09 +08:00
parent 47bd617b48
commit e6bc9c0e35
1 changed files with 31 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
xCAT/postscripts/configfirewall
View File

@ -192,9 +192,39 @@ elsif (-f "/etc/SuSE-release")
#system($cmd);
xCAT::Utils->enableservice("firewall");
}
elsif (system("grep -i ubuntu /etc/issue > /dev/null 2>&1") == 0)
{
my $fwconf = "/etc/fwrules.ubuntu";
if($::opt_private && $::opt_public)
{
&setup_ip_forwarding();
my $cmd = &generate_iptables_conf($::opt_private, $::opt_public);
system($cmd);
}
if ($::opt_nat)
{
my $cmd = &generate_nat_conf($::opt_private, $::opt_public);
system($cmd);
}
# iptables configuration should be persistent through reboots
my $cmd = "iptables-save > $fwconf";
system($cmd);
#put the iptables to rc.local, make firewall rules can be applied when system startup
if (system("grep '^iptables-restore.*$fwconf' /etc/rc.local"))
{
$cmd = "sed -i '2i iptables-restore < $fwconf' /etc/rc.local ";
system($cmd);
}
}
else
{
#Ubuntu: FIXME
#if this block is hit, it should be an unknown OS.
print "unknow os system";
exit 1;
}
exit 0;