webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-12 20:16:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

firewall: Drop support for blocking P2P protocols.

Browse Source 
The main P2P (peer-to-peer) aera has passed for several year now, so
this kind of feature is realy out-dated.

The feature only supports a handfull of P2P protocols (mostly unencrypted)
for applications, which have been superseeded by various other
applications and protocols.

So, this fairly is not longer required and safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Stefan Schantl
2022-02-14 20:03:04 +01:00
committed by Peter Müller
parent f14000733b
commit b6e4ebe86f
1 changed files with 0 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
config/firewall/rules.pl
View File

@@ -72,12 +72,9 @@ my %locationsettings = (
);
my %loaded_ipset_lists=();
my @p2ps=();
my $configfwdfw = "${General::swroot}/firewall/config";
my $configinput = "${General::swroot}/firewall/input";
my $configoutgoing = "${General::swroot}/firewall/outgoing";
my $p2pfile = "${General::swroot}/firewall/p2protocols";
my $locationfile = "${General::swroot}/firewall/locationblock";
my $configgrp = "${General::swroot}/fwhosts/customgroups";
my $netsettings = "${General::swroot}/ethernet/settings";
@@ -134,9 +131,6 @@ sub main {
&buildrules(\%configfwdfw);
}
# Load P2P block rules.
&p2pblock();
# Load Location block rules.
&locationblock();
@@ -656,23 +650,6 @@ sub time_convert_to_minutes {
return ($hrs * 60) + $min;
}
sub p2pblock {
open(FILE, "<$p2pfile") or die "Unable to read $p2pfile";
my @protocols = ();
foreach my $p2pentry (<FILE>) {
my @p2pline = split(/\;/, $p2pentry);
next unless ($p2pline[2] eq "off");
push(@protocols, "--$p2pline[1]");
}
close(FILE);
run("$IPTABLES -F P2PBLOCK");
if (@protocols) {
run("$IPTABLES -A P2PBLOCK -m ipp2p @protocols -j DROP");
}
}
sub locationblock {
# The LOCATIONBLOCK chain now gets flushed by the flush() function.