#!/usr/bin/perl # # Module:ConntrackUtil.pm # # **** License **** # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2 as # published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # This code was originally developed by Vyatta, Inc. # Portions created by Vyatta are Copyright (C) 2010 Vyatta, Inc. # All Rights Reserved. # # Author: Gaurav Sinha # Date: Dec 2011 # Description: Utility scripts for Vyatta conntrack # # # **** End License **** # package Vyatta::Conntrack::ConntrackUtil; use base qw(Exporter); our @EXPORT = qw(check_for_conntrack_hooks); #function to find if connection tracking is enabled. #looks in the iptables to see if any of the features introduced #its chain in the hooks. # #returns one if any hook is present sub check_for_conntrack_hooks { my @output = `sudo iptables -L -t raw`; foreach(@output) { if (($_ =~ m/WEBPROXY_CONNTRACK/)) { return 1; } if (($_ =~ m/NAT_CONNTRACK/)) { return 1; } if (($_ =~ m/FW_CONNTRACK/)) { return 1; } } } 1; # end of file