summaryrefslogtreecommitdiff
path: root/lib/Vyatta
diff options
context:
space:
mode:
authorAn-Cheng Huang <ancheng@vyatta.com>2008-12-03 11:23:53 -0800
committerAn-Cheng Huang <ancheng@vyatta.com>2008-12-03 11:23:53 -0800
commit0a5b4efc5e48358525b6a1ec119aa296fee388d4 (patch)
tree2491c81a10fa90fee37e3713ce9727a1f9af9c1c /lib/Vyatta
parent515c6678e3d486768bd6fb5ed3c0efd5538caa1d (diff)
downloadvyatta-cfg-firewall-0a5b4efc5e48358525b6a1ec119aa296fee388d4.tar.gz
vyatta-cfg-firewall-0a5b4efc5e48358525b6a1ec119aa296fee388d4.zip
add ipp2p config options
Diffstat (limited to 'lib/Vyatta')
-rw-r--r--lib/Vyatta/IpTables/Rule.pm49
1 files changed, 49 insertions, 0 deletions
diff --git a/lib/Vyatta/IpTables/Rule.pm b/lib/Vyatta/IpTables/Rule.pm
index fa7a0e5..9cbd303 100644
--- a/lib/Vyatta/IpTables/Rule.pm
+++ b/lib/Vyatta/IpTables/Rule.pm
@@ -28,6 +28,15 @@ my %fields = (
_non_frag => undef,
_recent_time => undef,
_recent_cnt => undef,
+ _p2p => {
+ _all => undef,
+ _apple => undef,
+ _bit => undef,
+ _dc => undef,
+ _edk => undef,
+ _gnu => undef,
+ _kazaa => undef,
+ },
);
my %dummy_rule = (
@@ -51,6 +60,15 @@ my %dummy_rule = (
_non_frag => undef,
_recent_time => undef,
_recent_cnt => undef,
+ _p2p => {
+ _all => undef,
+ _apple => undef,
+ _bit => undef,
+ _dc => undef,
+ _edk => undef,
+ _gnu => undef,
+ _kazaa => undef,
+ },
);
sub new {
@@ -99,6 +117,14 @@ sub setup {
$self->{_non_frag} = $config->exists("fragment match-non-frag");
$self->{_recent_time} = $config->returnValue('recent time');
$self->{_recent_cnt} = $config->returnValue('recent count');
+
+ $self->{_p2p}->{_all} = $config->exists("p2p all");
+ $self->{_p2p}->{_apple} = $config->exists("p2p applejuice");
+ $self->{_p2p}->{_bit} = $config->exists("p2p bittorrent");
+ $self->{_p2p}->{_dc} = $config->exists("p2p directconnect");
+ $self->{_p2p}->{_edk} = $config->exists("p2p edonkey");
+ $self->{_p2p}->{_gnu} = $config->exists("p2p gnutella");
+ $self->{_p2p}->{_kazaa} = $config->exists("p2p kazaa");
# TODO: need $config->exists("$level source") in Vyatta::Config.pm
$src->setup("$level source");
@@ -137,6 +163,14 @@ sub setupOrig {
$self->{_recent_time} = $config->returnOrigValue('recent time');
$self->{_recent_cnt} = $config->returnOrigValue('recent count');
+ $self->{_p2p}->{_all} = $config->existsOrig("p2p all");
+ $self->{_p2p}->{_apple} = $config->existsOrig("p2p applejuice");
+ $self->{_p2p}->{_bit} = $config->existsOrig("p2p bittorrent");
+ $self->{_p2p}->{_dc} = $config->existsOrig("p2p directconnect");
+ $self->{_p2p}->{_edk} = $config->existsOrig("p2p edonkey");
+ $self->{_p2p}->{_gnu} = $config->existsOrig("p2p gnutella");
+ $self->{_p2p}->{_kazaa} = $config->existsOrig("p2p kazaa");
+
# TODO: need $config->exists("$level source") in Vyatta::Config.pm
$src->setupOrig("$level source");
$dst->setupOrig("$level destination");
@@ -286,6 +320,21 @@ sub rule {
}
}
+ my $p2p = undef;
+ if (defined($self->{_p2p}->{_all})) {
+ $p2p = '--apple --bit --dc --edk --gnu --kazaa ';
+ } else {
+ my @apps = qw(apple bit dc edk gnu kazaa);
+ foreach (@apps) {
+ if (defined($self->{_p2p}->{"_$_"})) {
+ $p2p .= "--$_ ";
+ }
+ }
+ }
+ if (defined($p2p)) {
+ $rule .= " -m ipp2p $p2p ";
+ }
+
my $chain = $self->{_name};
my $rule_num = $self->{_rule_number};
my $rule2 = undef;