From c3d66da7c162508a7fdfddbf4aaaf2adfc4f7a58 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Fri, 6 Nov 2020 11:00:33 -0300
Subject: Feat: WIP: ipredator/njalla migration

---
 .../files/njalla/usr/local/bin/fermreload.sh       | 39 ++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100755 share/provision/files/njalla/usr/local/bin/fermreload.sh

(limited to 'share/provision/files/njalla/usr')

diff --git a/share/provision/files/njalla/usr/local/bin/fermreload.sh b/share/provision/files/njalla/usr/local/bin/fermreload.sh
new file mode 100755
index 0000000..cebf7cc
--- /dev/null
+++ b/share/provision/files/njalla/usr/local/bin/fermreload.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+#
+# fermreload.sh
+# V: 0.1
+#
+# Reloads the ferm firewall ruleset and is invoked by
+# the udev via /etc/udev/rules.d/81-vpn-firewall.rules.
+#
+# IPredator 2014
+# Released under the Kopimi license.
+#
+# Blog post:   https://blog.ipredator.se/linux-firewall-howto.html
+#
+
+LOGGER=/usr/bin/logger
+LOGGER_TAG=$0
+
+UDEV_ACTION=$1
+
+FERM=/usr/sbin/ferm
+FERM_CONF=/etc/ferm/ferm.conf
+
+MSG_FW_RULE_ADD="Adding VPN firewall rules."
+MSG_FW_RULE_REMOVE="Removing VPN firewall rules."
+MSG_UDEV_ACTION_UNKNOWN="Unknown udev action."
+
+case "$UDEV_ACTION" in
+    add)
+        $LOGGER -t $LOGGER_TAG $MSG_FW_RULE_ADD
+        $FERM $FERM_CONF
+        ;;
+    remove)
+        $LOGGER -t $LOGGER_TAG $MSG_FW_RULE_REMOVE
+        $FERM $FERM_CONF
+        ;;
+    *)
+        $LOGGER -t $LOGGER_TAG $MSG_UDEV_ACTION_UNKNOWN
+        exit 1
+esac
-- 
cgit v1.2.3