summaryrefslogtreecommitdiff
path: root/scripts/vyatta-cthelper.pl
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/vyatta-cthelper.pl')
-rw-r--r--scripts/vyatta-cthelper.pl78
1 files changed, 0 insertions, 78 deletions
diff --git a/scripts/vyatta-cthelper.pl b/scripts/vyatta-cthelper.pl
deleted file mode 100644
index 8063586..0000000
--- a/scripts/vyatta-cthelper.pl
+++ /dev/null
@@ -1,78 +0,0 @@
-#!/usr/bin/perl
-
-use lib "/opt/vyatta/share/perl5";
-use warnings;
-use strict;
-
-use Vyatta::Config;
-use Vyatta::Conntrack::ConntrackUtil;
-use Vyatta::IpTables::Mgr;
-use Getopt::Long;
-use Sys::Syslog qw(:standard :macros);
-
-#for future
-my %cmd_hash = (
- 'ipv4' => 'iptables',
- 'ipv6' => 'ip6tables'
-);
-
-my $nfct = "sudo /usr/sbin/nfct";
-my ($enable_sqlnet, $disable_sqlnet, $enable_nfs, $disable_nfs);
-my $CTERROR = "Conntrack error:";
-
-GetOptions(
- 'enable_sqlnet=s' => \$enable_sqlnet,
- 'disable_sqlnet=s' => \$disable_sqlnet,
- 'disable_nfs=s' => \$disable_nfs,
- 'enable_nfs=s' => \$enable_nfs,
-);
-
-# subroutine to add helper rule to VYATTA_CT_HELPER chain.
-sub add_helper_to_chain {
- my ($module) = @_;
- my $iptables_cmd = $cmd_hash{'ipv4'};
- if ($module eq 'sqlnet') {
- run_cmd("$iptables_cmd -I VYATTA_CT_HELPER -t raw -p tcp --dport 1521 -j CT --helper tns");
- run_cmd("$iptables_cmd -I VYATTA_CT_HELPER -t raw -p tcp --dport 1525 -j CT --helper tns");
- run_cmd("$iptables_cmd -I VYATTA_CT_HELPER -t raw -p tcp --dport 1536 -j CT --helper tns");
- } elsif ($module eq 'nfs') {
- run_cmd(" $iptables_cmd -I VYATTA_CT_HELPER -t raw -p tcp --dport 111 -j CT --helper rpc");
- run_cmd(" $iptables_cmd -I VYATTA_CT_HELPER -t raw -p udp --dport 111 -j CT --helper rpc");
- }
-}
-
-# subroutine to delete helper rule from VYATTA_CT_HELPER chain.
-sub delete_helper_from_chain {
- my ($module) = @_;
- my $iptables_cmd = $cmd_hash{'ipv4'};
- if ($module eq 'sqlnet') {
- run_cmd("$iptables_cmd -D VYATTA_CT_HELPER -t raw -p tcp --dport 1521 -j CT --helper tns");
- run_cmd("$iptables_cmd -D VYATTA_CT_HELPER -t raw -p tcp --dport 1525 -j CT --helper tns");
- run_cmd("$iptables_cmd -D VYATTA_CT_HELPER -t raw -p tcp --dport 1536 -j CT --helper tns");
- } elsif ($module eq 'nfs') {
- run_cmd("$iptables_cmd -D VYATTA_CT_HELPER -t raw -p tcp --dport 111 -j CT --helper rpc");
- run_cmd("$iptables_cmd -D VYATTA_CT_HELPER -t raw -p udp --dport 111 -j CT --helper rpc");
- }
-}
-
-# should disable the required helper module
-sub disable_helper_module {
- my ($module) = @_;
- delete_helper_from_chain($module);
-}
-
-# should enable the required helper module
-sub enable_helper_module {
- my ($module) = @_;
- add_helper_to_chain($module);
-}
-
-if (defined $enable_sqlnet){
- enable_helper_module("sqlnet");
-} elsif (defined $disable_sqlnet) {
- disable_helper_module("sqlnet");
-} elsif (defined $enable_nfs) {
- enable_helper_module("nfs");
-} elsif (defined $disable_nfs) {
- disable_helper_module("nfs");
-}