From de0b2b5b417d9d70283458dbc5307fd0f4d1e701 Mon Sep 17 00:00:00 2001 From: Evan Broder Date: Fri, 28 Mar 2008 21:10:53 -0400 Subject: [PATCH] Ok - I think this will load the iptables rules on boot svn path=/trunk/packages/sipb-xen-iptables/; revision=294 --- code/iptables.rules | 17 ++++++ debian/changelog | 5 ++ debian/compat | 1 + debian/control | 11 ++++ debian/copyright | 3 + debian/rules | 6 ++ debian/sipb-xen-iptables.init | 112 ++++++++++++++++++++++++++++++++++++++ debian/sipb-xen-iptables.install | 1 + 8 files changed, 156 insertions(+) create mode 100644 code/iptables.rules create mode 100644 debian/changelog create mode 100644 debian/compat create mode 100644 debian/control create mode 100644 debian/copyright create mode 100755 debian/rules create mode 100644 debian/sipb-xen-iptables.init create mode 100644 debian/sipb-xen-iptables.install diff --git a/code/iptables.rules b/code/iptables.rules new file mode 100644 index 0000000..15b079a --- /dev/null +++ b/code/iptables.rules @@ -0,0 +1,17 @@ +# Generated by iptables-save v1.3.6 on Mon Oct 8 01:59:16 2007 +*filter +:INPUT ACCEPT [366:44912] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [292:53151] +-A FORWARD -d 18.181.0.60 -i eth0 -o eth0 -p tcp -m tcp --dport 10003 -j ACCEPT +COMMIT +# Completed on Mon Oct 8 01:59:16 2007 +# Generated by iptables-save v1.3.6 on Mon Oct 8 01:59:16 2007 +*nat +:PREROUTING ACCEPT [5:300] +:POSTROUTING ACCEPT [8:674] +:OUTPUT ACCEPT [8:674] +-A PREROUTING -s ! 18.181.0.60 -i eth0 -p tcp -m tcp --dport 10003 -j DNAT --to-destination 18.181.0.60:10003 +-A POSTROUTING -d 18.181.0.60 -o eth0 -p tcp -m tcp --dport 10003 -j SNAT --to-source 18.181.0.62 +COMMIT +# Completed on Mon Oct 8 01:59:16 2007 diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..e17189a --- /dev/null +++ b/debian/changelog @@ -0,0 +1,5 @@ +sipb-xen-iptables (1) unstable; urgency=low + + * Initial Release. + -- SIPB Xen Project Sun, 25 Feb 2008 00:05:12 -0500 + diff --git a/debian/compat b/debian/compat new file mode 100644 index 0000000..b8626c4 --- /dev/null +++ b/debian/compat @@ -0,0 +1 @@ +4 diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..2f7912d --- /dev/null +++ b/debian/control @@ -0,0 +1,11 @@ +Source: sipb-xen-iptables +Section: base +Priority: extra +Maintainer: SIPB Xen Project +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 4.1.0), subversion +Standards-Version: 3.7.2 + +Package: sipb-xen-iptables +Architecture: all +Depends: ${misc:Depends}, iptables +Description: Configure at boot the iptables rules for the VNC proxy client diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..7789434 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask sipb-xen@mit.edu if +you have questions about redistribution. diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..3f9af0f --- /dev/null +++ b/debian/rules @@ -0,0 +1,6 @@ +#!/usr/bin/make -f + +include /usr/share/cdbs/1/rules/debhelper.mk + +binary-fixup/sipb-xen-iptables:: + svn co https://sipb-xen-dev.mit.edu:1111/trunk/packages/sipb-xen-iptables/code/ $(DEB_DESTDIR)/usr/local/share/sipb-xen-iptables diff --git a/debian/sipb-xen-iptables.init b/debian/sipb-xen-iptables.init new file mode 100644 index 0000000..49f92d3 --- /dev/null +++ b/debian/sipb-xen-iptables.init @@ -0,0 +1,112 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: sipb-xen-iptables +# Required-Start: $local_fs $remote_fs +# Required-Stop: $local_fs $remote_fs +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: sipb-xen iptables rules +# Description: +### END INIT INFO + +# Author: SIPB Xen Project + +# Do NOT "set -e" + +# PATH should only include /usr/* if it runs after the mountnfs.sh script +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="Load the sipb-xen iptables rules" +NAME=sipb-xen-iptables +RULES=/usr/local/share/sipb-xen-iptables/iptables.rules + +# Read configuration variable file if it is present +[ -r /etc/default/$NAME ] && . /etc/default/$NAME + +# Load the VERBOSE setting and other rcS variables +. /lib/init/vars.sh + +# Define LSB log_* functions. +# Depend on lsb-base (>= 3.0-6) to ensure that this file is present. +. /lib/lsb/init-functions + +# +# Function that starts the daemon/service +# +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # 2 if daemon could not be started + /sbin/iptables-restore < $RULES +} + +# +# Function that stops the daemon/service +# +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # 2 if daemon could not be stopped + # other if a failure occurred + return 0 +} + +case "$1" in + start) + [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME" + do_start + case "$?" in + 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; + 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; + esac + ;; + stop) + [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME" + do_stop + case "$?" in + 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; + 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; + esac + ;; + #reload|force-reload) + # + # If do_reload() is not implemented then leave this commented out + # and leave 'force-reload' as an alias for 'restart'. + # + #log_daemon_msg "Reloading $DESC" "$NAME" + #do_reload + #log_end_msg $? + #;; + restart|force-reload) + # + # If the "reload" option is implemented then remove the + # 'force-reload' alias + # + log_daemon_msg "Restarting $DESC" "$NAME" + do_stop + case "$?" in + 0|1) + do_start + case "$?" in + 0) log_end_msg 0 ;; + 1) log_end_msg 1 ;; # Old process is still running + *) log_end_msg 1 ;; # Failed to start + esac + ;; + *) + # Failed to stop + log_end_msg 1 + ;; + esac + ;; + *) + #echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2 + echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2 + exit 3 + ;; +esac + +: diff --git a/debian/sipb-xen-iptables.install b/debian/sipb-xen-iptables.install new file mode 100644 index 0000000..9da31b3 --- /dev/null +++ b/debian/sipb-xen-iptables.install @@ -0,0 +1 @@ +files/* . -- 1.7.9.5