Mirrors
/
aredn
mirror of https://github.com/aredn/aredn.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow SSH, WEB and TELNET access to be disabled on WAN (enabled by default) (#903)

This commit is contained in:
Tim Wilkinson 2023-07-18 22:52:41 -07:00 committed by GitHub
parent 2c30d64c67
commit ef17d9bcd1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
files/etc/local/mesh-firewall/12-wan-services
View File

@ -34,12 +34,17 @@ LICENSE
MESHFW_WAN_WEB=$(/sbin/uci -q get aredn.@wan[0].web_access) MESHFW_WAN_WEB=$(/sbin/uci -q get aredn.@wan[0].web_access)
MESHFW_WAN_SSH=$(/sbin/uci -q get aredn.@wan[0].ssh_access) MESHFW_WAN_SSH=$(/sbin/uci -q get aredn.@wan[0].ssh_access)
MESHFW_WAN_TELNET=$(/sbin/uci -q get aredn.@wan[0].telnet_access)
if [ "${MESHFW_WAN_WEB}" = "1" ]; then if [ "${MESHFW_WAN_WEB}" != "0" ]; then
nft insert rule ip fw4 input_wan tcp dport 80 accept comment \"wan web access\" 2> /dev/null nft insert rule ip fw4 input_wan tcp dport 80 accept comment \"wan web access\" 2> /dev/null
nft insert rule ip fw4 input_wan tcp dport 8080 accept comment \"wan web access\" > /dev/null nft insert rule ip fw4 input_wan tcp dport 8080 accept comment \"wan web access\" > /dev/null
fi fi
if [ "${MESHFW_WAN_SSH}" = "1" ]; then if [ "${MESHFW_WAN_SSH}" != "0" ]; then
nft insert rule ip fw4 input_wan tcp dport 2222 accept comment \"wan ssh access\" 2> /dev/null nft insert rule ip fw4 input_wan tcp dport 2222 accept comment \"wan ssh access\" 2> /dev/null
fi fi
if [ "${MESHFW_WAN_TELNET}" != "0" ]; then
nft insert rule ip fw4 input_wan tcp dport 23 accept comment \"wan telnet access\" 2> /dev/null
fi

12
files/www/cgi-bin/advancedconfig
View File

@ -208,7 +208,7 @@ local settings = {
key = "aredn.@wan[0].web_access", key = "aredn.@wan[0].web_access",
type = "boolean", type = "boolean",
desc = "<b>Enable web access</b> to the node from the WAN interface<br><br><small>aredn.@wan[0].web_access</small>", desc = "<b>Enable web access</b> to the node from the WAN interface<br><br><small>aredn.@wan[0].web_access</small>",
default = "0", default = "1",
needreboot = true needreboot = true
}, },
{ {
@ -216,7 +216,15 @@ local settings = {
key = "aredn.@wan[0].ssh_access", key = "aredn.@wan[0].ssh_access",
type = "boolean", type = "boolean",
desc = "<b>Enable SSH access</b> to the node from the WAN interface<br><br><small>aredn.@wan[0].ssh_access</small>", desc = "<b>Enable SSH access</b> to the node from the WAN interface<br><br><small>aredn.@wan[0].ssh_access</small>",
default = "0", default = "1",
needreboot = true
},
{
category = "WAN Settings",
key = "aredn.@wan[0].telnet_access",
type = "boolean",
desc = "<b>Enable TELNET access</b> to the node from the WAN interface<br><br><small>aredn.@wan[0].telnet_access</small>",
default = "1",
needreboot = true needreboot = true
}, },
{ {