Skip to content

Commit

Permalink
firewall: Add FreeBSD firewall
Browse files Browse the repository at this point in the history
  • Loading branch information
sharsonia committed May 16, 2023
1 parent 36e0ff3 commit 4f5b62c
Showing 1 changed file with 51 additions and 0 deletions.
51 changes: 51 additions & 0 deletions lisa/tools/firewall.py
Original file line number Diff line number Diff line change
@@ -1,8 +1,10 @@
# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.
import re

from lisa.base_tools import Service
from lisa.executable import Tool
from lisa.tools import Sed


class Firewall(Tool):
Expand Down Expand Up @@ -35,6 +37,11 @@ def stop(self) -> None:
iptables = self.node.tools[Iptables]
iptables.stop()
return
cmd_result = self.node.execute("command -v ipf", shell=True)
if 0 == cmd_result.exit_code:
ipf = self.node.tools[Ipf]
ipf.stop()
return


class Ufw(Tool):
Expand Down Expand Up @@ -149,3 +156,47 @@ def can_install(self) -> bool:
def stop(self) -> None:
service = self.node.tools[Service]
service.stop_service("firewalld")


class Ipf(Tool):
_ipf_enable_pattern = re.compile(
r"(?P<param>ipfilter_enable=):*(?P<value>.*)$", re.MULTILINE
)

@property
def command(self) -> str:
return "ipf"

@property
def can_install(self) -> bool:
return False

def stop(self) -> None:
cmd_result = self.run("cat /etc/rc.conf", shell=True, sudo=True, force_run=True)
ipf_enable_found = re.search(self._ipf_enable_pattern, cmd_result.stdout)
if ipf_enable_found:
self.run(
"sed '/ipfilter_enable/s/YES/NO/g' /etc/rc.conf",
shell=True,
sudo=True,
force_run=True,
)

def start(self) -> None:
cmd_result = self.run("cat /etc/rc.conf", shell=True, sudo=True, force_run=True)
ipf_enable_found = re.search(self._ipf_enable_pattern, cmd_result.stdout)
if ipf_enable_found:
self.node.tools[Sed].substitute(
regexp="NO",
replacement="YES",
file="/etc/rc.conf",
match_lines="ipfilter_enable",
sudo=True,
)
else:
self.run(
'echo "ipf_enable="YES"" | sudo tee -a /etc/rc.conf >/dev/null',
shell=True,
sudo=True,
force_run=True,
)

0 comments on commit 4f5b62c

Please sign in to comment.