From 32238d63e5f9540d2cd4016df64a3939dbc2cd8e Mon Sep 17 00:00:00 2001
From: Akshay Nair <phenax5@gmail.com>
Date: Sun, 11 Apr 2021 14:06:59 +0530
Subject: firewall control script

---
 scripts/firewall.sh | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100755 scripts/firewall.sh

(limited to 'scripts')

diff --git a/scripts/firewall.sh b/scripts/firewall.sh
new file mode 100755
index 0000000..0669e7f
--- /dev/null
+++ b/scripts/firewall.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+allow_proto_port() {
+  sudo iptables -I INPUT -p $1 --dport $2 -j ACCEPT;
+  sudo ip6tables -I INPUT -p $1 --dport $2 -j ACCEPT;
+}
+
+allow_port() {
+  [[ $# != 1 ]] && echo "Invalid command: firewall allow <port>" && exit 1;
+  allow_proto_port tcp $1;
+  allow_proto_port udp $1;
+}
+
+restore_table() {
+  sudo iptables-restore < ~/dump/iptables-backup;
+}
+
+cmd="$1"; shift;
+
+case "$cmd" in
+  allow) allow_port "$@" ;;
+  restore) restore_table ;;
+  *) echo "Invalid command" && exit 1 ;;
+esac;
+
-- 
cgit v1.3.1