dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update event guard for freebsd

Browse Source
This commit is contained in:
FusionPBX
2024-08-25 19:31:05 -06:00
committed by GitHub
parent a7b1644436
commit d45f6ddae0
1 changed files with 34 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/event_guard/resources/service/event_guard.php
+34 -8
View File
@@ -1,6 +1,6 @@
<?php <?php
/* /*
Copyright (C) 2022-2023 Mark J Crane <markjcrane@fusionpbx.com> Copyright (C) 2022-2024 Mark J Crane <markjcrane@fusionpbx.com>
Redistribution and use in source and binary forms, with or without Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met: modification, are permitted provided that the following conditions are met:
@@ -88,6 +88,14 @@
exit; exit;
} }
//add pf tables into your pf.conf file
//if ($firewall_name == 'pf') {
// table <sip-auth-ip> persist
// table <sip-auth-fail> persist
// block in quick from <sip-auth-ip>
// block in quick from <sip-auth-fail>
//}
//add the iptables chains //add the iptables chains
if ($firewall_name == 'iptables') { if ($firewall_name == 'iptables') {
//create a chain array //create a chain array
@@ -321,8 +329,8 @@
//run the block command for pf //run the block command for pf
if ($firewall_name == 'pf') { if ($firewall_name == 'pf') {
//example: pfctl -t sip-auth-ip -T add 127.0.0.5/32 //example: pfctl -t sip-auth-ip -T add 127.0.0.5
$command = $firewall_path.'/pfctl -t '.$filter.' -T add '.$ip_address.'/32'; $command = $firewall_path.'/pfctl -t '.$filter.' -T add '.$ip_address;
$result = shell($command); $result = shell($command);
} }
@@ -380,8 +388,8 @@
//unblock the address //unblock the address
if ($firewall_name == 'pf') { if ($firewall_name == 'pf') {
//example: pfctl -t sip-auth-ip -T delete 127.0.0.5/32 //example: pfctl -t sip-auth-ip -T delete 127.0.0.5
$command = $firewall_path.'/pfctl -t '.$filter.' -T delete '.$ip_address.'/32'; $command = $firewall_path.'/pfctl -t '.$filter.' -T delete '.$ip_address;
$result = shell($command); $result = shell($command);
} }
@@ -406,7 +414,7 @@
//check to see if the address is blocked //check to see if the address is blocked
$command = $firewall_path.'/./iptables -L -n --line-numbers | grep '.$ip_address; $command = $firewall_path.'/./iptables -L -n --line-numbers | grep '.$ip_address;
$result = shell($command); $result = shell($command);
if (strlen($result) > 3) { if (!empty($result) && strlen($result) > 3) {
return true; return true;
} }
} }
@@ -414,7 +422,7 @@
//check to see if the address is blocked //check to see if the address is blocked
$command = $firewall_path.'/pfctl -t ".$filter." -Ts | grep '.$ip_address; $command = $firewall_path.'/pfctl -t ".$filter." -Ts | grep '.$ip_address;
$result = shell($command); $result = shell($command);
if (strlen($result) > 3) { if (!empty($result) && strlen($result) > 3) {
return true; return true;
} }
} }
@@ -602,7 +610,7 @@
$allowed = false; $allowed = false;
//use the ip address to get the authorized nodes //use the ip address to get the authorized nodes
if ($user_log_count > 0) { if (!empty($user_log_count) && $user_log_count > 0) {
$allowed = true; $allowed = true;
} }
@@ -645,6 +653,23 @@
return $allowed; return $allowed;
} }
//check if the iptables chain exists
function pf_table_exists($table) {
//define the global variables
global $firewall_path, $firewall_name;
//build the command to check if the pf table exists
$command = $firewall_path."/./pfctl -t ".$table." -T show | grep error";
//if ($debug) { echo $command."\n"; }
$response = shell($command);
if (!empty($response)) {
return true;
}
else {
return false;
}
}
//add IP table chains //add IP table chains
function iptables_chain_add($chain) { function iptables_chain_add($chain) {
//define the global variables //define the global variables
@@ -691,3 +716,4 @@
} }
?> ?>