NethServer 6

The firewall-adjust action acts on the firewall configuration, to allow access to enabled services only.

• if service has status=enabled invoke enable script
• else invoke disable script

At the end, invoke apply script, to persist changes.

Each script receives ${SERVICE}, ${PORT}, ${PROTO} parameters

Scripts are stored under firewall key in configuration database: by default they invoke lokkit.

Script templates (for lokkit backend)¶

OPEN

  /usr/bin/lokkit -n -p ${PORT}:${PROTO}

CLOSE

   sed -i /^--port=${PORT}:${PROTO}/d /etc/sysconfig/system-config-firewall; 

APPLY

   /usr/bin/lokkit --update