NethServer 6

When Shorewall is stopped, it can apply all rules listed in etc/shorewall/stoppedrules.

Simple template which opens ssh, httpd-admin and ping services:

# Always keep httpd-admin, SSH and ping available

ACCEPT  -  $FW  icmp
ACCEPT  -  $FW  tcp  {$sshd{'TCPPort'}}
ACCEPT  -  $FW  tcp  {${'httpd-admin'}{'TCPPort'}}

Quick and dirty implementation of Shorewall check rules from web interface.

Controller:

<?php
namespace NethServer\Module\FirewallRules;

class CheckRules extends \Nethgui\Controller\AbstractController
{
    private $output = "";

    public function process()
    {
        $this->output = $this->getPlatform()->exec('/usr/bin/sudo /usr/libexec/nethserver/shorewall-check')->getOutput();
        parent::process();
    }

    public function prepareView(\Nethgui\View\ViewInterface $view)
    {
         $view['check-rules'] = $this->output; 
    }
}

Template:

<?php

echo $view->header()->setAttribute('template', $T('check-rules_Header'));

echo "<pre>";
echo $view->textLabel('check-rules');
echo "</pre>";

Helper script (/usr/libexec/nethserver/shorewall-check):

#!/bin/bash

/usr/sbin/shorewall check 2>&1

To access the page: http:/_server_/en/FirewallRules/CheckRules