1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
|
#!/usr/bin/perl
#
# Module: vyatta-ipset.pl
#
# **** License ****
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# This code was originally developed by Vyatta, Inc.
# Portions created by Vyatta are Copyright (C) 2009 Vyatta, Inc.
# All Rights Reserved.
#
# Author: Stig Thormodsrud
# Date: January 2009
# Description: Script to configure ipset to support firewall groups
#
# **** End License ****
#
use Getopt::Long;
use POSIX;
use lib "/opt/vyatta/share/perl5";
use Vyatta::Config;
use Vyatta::TypeChecker;
use Vyatta::Misc;
use Vyatta::IpTables::IpSet;
use warnings;
use strict;
sub ipset_create {
my ($set_name, $set_type) = @_;
my $group = new Vyatta::IpTables::IpSet($set_name, $set_type);
return $group->create();
}
sub ipset_delete {
my $set_name = shift;
my $group = new Vyatta::IpTables::IpSet($set_name);
return $group->delete();
}
sub ipset_check_member {
my ($set_name, $set_type, $member) = @_;
die "undefined type or member" if ! defined $set_type or ! defined $member;
my $group = new Vyatta::IpTables::IpSet($set_name, $set_type);
return $group->check_member($member);
}
sub ipset_add_member {
my ($set_name, $member) = @_;
die "Error: undefined member" if ! defined $member;
my $group = new Vyatta::IpTables::IpSet($set_name);
return $group->add_member($member);
}
sub ipset_delete_member {
my ($set_name, $member) = @_;
die "Error: undefined member" if ! defined $member;
my $group = new Vyatta::IpTables::IpSet($set_name);
return $group->delete_member($member);
}
#
# main
#
my ($action, $set_name, $set_type, $member);
GetOptions("action=s" => \$action,
"set-name=s" => \$set_name,
"set-type=s" => \$set_type,
"member=s" => \$member,
);
die "undefined action" if ! defined $action;
my $rc;
$rc = ipset_create($set_name, $set_type) if $action eq 'create-set';
$rc = ipset_delete($set_name) if $action eq 'delete-set';
$rc = ipset_check_member($set_name, $set_type, $member)
if $action eq 'check-member';
$rc = ipset_add_member($set_name, $member) if $action eq 'add-member';
$rc = ipset_delete_member($set_name, $member) if $action eq 'delete-member';
if (defined $rc) {
print $rc;
exit 1;
}
exit 0;
# end of file
|
