diff options
author | Quentin <quentin@deuxfleurs.fr> | 2020-02-09 20:09:20 +0100 |
---|---|---|
committer | Quentin <quentin@deuxfleurs.fr> | 2020-02-09 20:09:20 +0100 |
commit | 96c6da392fc3236754c273a299728ad0360b3d51 (patch) | |
tree | db6732c726c731396b482debe329cd5894613d02 /docker/netiquette/src/injector/iptables.mjs | |
parent | ba5590ce97953f66702b149fd7840bcb58d4b463 (diff) | |
download | infrastructure-96c6da392fc3236754c273a299728ad0360b3d51.tar.gz infrastructure-96c6da392fc3236754c273a299728ad0360b3d51.zip |
[diplomate] Skeleton for our UPNP configurator
Diffstat (limited to 'docker/netiquette/src/injector/iptables.mjs')
-rw-r--r-- | docker/netiquette/src/injector/iptables.mjs | 53 |
1 files changed, 0 insertions, 53 deletions
diff --git a/docker/netiquette/src/injector/iptables.mjs b/docker/netiquette/src/injector/iptables.mjs deleted file mode 100644 index 584b560..0000000 --- a/docker/netiquette/src/injector/iptables.mjs +++ /dev/null @@ -1,53 +0,0 @@ -'use strict' - -let l; -export default l = async (path, readFile, exec, log) => { - - const load_static_rules = async path => - (await readFile(path, 'utf-8')) - .split('\n') - .filter(e => e) - - const get_current_rules = async () => - (await exec('iptables -S INPUT')) - .stdout - .split('\n') - .filter(e => e.match(/^-A INPUT/g)) - - const compute_rules_to_add = (current, target) => - target.filter(r => !current.includes(r)) - - const compute_rules_to_del = (current, target) => - current - .filter(r => !target.includes(r)) - .map(r => r.replace(/^-A INPUT/g, '-D INPUT')) - - const update_rules = async (current, target) => - await Promise.all([ - ...compute_rules_to_del(current, target), - ...compute_rules_to_add(current, target) - ].map(r => exec(`iptables ${r}`))) - - const build_target_rules = (tag_list) => - tag_list - .map(t => /^public_port=(\d+)(-(\d+))?\/(udp|tcp)/g.exec(t)) - .filter(t => t) - .map(t => new Object({ start: t[1], stop: t[3], protocol: t[4] })) - .map(t => t.stop - ? `-A INPUT -p ${t.protocol} --match multiport --dports ${t.start}:${t.stop} -j ACCEPT` - : `-A INPUT -p ${t.protocol} --dport ${t.start} -j ACCEPT`) - - const do_log = (tag_list, r) => { - //log('[iptables]', tag_list) - log(`[iptables] ran ${r.length} commands`) - } - - const static_rules = path ? await load_static_rules(path) : [] - log(`[iptables] initialized with ${static_rules.length} static rules`) - return async tag_list => - do_log( - tag_list, - await update_rules( - await get_current_rules(), - [...static_rules, ...build_target_rules(tag_list)])) -} |