Bugfix: 7712 add zone-policy operational mode command

1 files changed, 56 insertions, 0 deletions

diff --git a/scripts/vyatta-show-zone.pl b/scripts/vyatta-show-zone.pl
new file mode 100644
index 0000000..501e278
--- /dev/null
+++ b/scripts/vyatta-show-zone.pl
@@ -0,0 +1,56 @@
+#!/usr/bin/env perl
+use lib "/opt/vyatta/share/perl5/";
+use Vyatta::Zone;
+use Getopt::Long;
+my $zone_in;
+GetOptions("zone=s" => \$zone_in);
+
+my $zone_hash = Vyatta::Zone::get_zone_hash();
+my $format = "  %-20s%-35s%s\n";
+for my $zone (sort(keys %{$zone_hash})) {
+   if (defined $zone_in){
+     next unless $zone eq $zone_in;
+   }
+   print "-------------------\n";
+   print "Name: $zone" . 
+     (defined($zone_hash->{$zone}{'description'}) 
+       ? " [$zone_hash->{$zone}{'description'}]\n" : "\n");
+   print "\n";
+   print "Interfaces: @{$zone_hash->{$zone}{'interfaces'}}\n";
+   print "\n";
+   print "From Zone:\n";
+   printf($format, "name", "firewall", "content-inspection");
+   printf($format, "----", "--------", "------------------");
+   for my $from_zone (sort(keys(%{$zone_hash->{$zone}{'from'}}))){
+     my ($firewall, $ipv6_firewall, $ci);
+     $firewall = $zone_hash->{$zone}{'from'}->{$from_zone}{'firewall'}->{'ipv4'}
+       if (defined($zone_hash->{$zone}{'from'}->{$from_zone}{'firewall'}->{'ipv4'}));
+     $ipv6_firewall = $zone_hash->{$zone}{'from'}->{$from_zone}{'firewall'}->{'ipv6'}
+       if (defined($zone_hash->{$zone}{'from'}->{$from_zone}{'firewall'}->{'ipv6'}));
+     $ci = $zone_hash->{$zone}{'from'}->{$from_zone}{'content-inspection'}
+       if (defined($zone_hash->{$zone}{'from'}->{$from_zone}{'content-inspection'}));
+     if (defined($firewall)){
+       if (defined($ci)) {
+         printf($format, "$from_zone", "$firewall", "$ci");
+       } else {
+         printf($format, "$from_zone", "$firewall", "disabled");
+       }
+       if (defined($ipv6_firewall)){
+         printf($format, "", "$ipv6_firewall [v6]", "");
+       }
+     } elsif (defined($ipv6_firewall)){
+       if (defined($ci)) {
+         printf($format, "$from_zone", "$ipv6_firewall [v6]", "$ci");
+       } else {
+         printf($format, "$from_zone", "$ipv6_firewall [v6]", "disabled");
+       }
+     } else {
+       if (defined($ci)) {
+         printf($format, "$from_zone", "-", "$ci");
+       } else {
+         printf($format, "$from_zone", "-", "disabled");
+       }
+     }
+   }
+   print "\n";
+}