iptables.sh 1.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354
  1. #!/bin/sh
  2. #move to script directory so all relative paths work
  3. cd "$(dirname "$0")"
  4. #includes
  5. . ../config.sh
  6. #set the date
  7. now=$(date +%Y-%m-%d)
  8. #show this server's addresses
  9. server_address=$(hostname -I);
  10. echo "This Server Address: $server_address"
  11. #nodes addresses
  12. read -p "Enter all Node IP Addresses: " nodes
  13. #determine whether to add iptable rules
  14. read -p 'Add iptable rules (y/n): ' iptables_add
  15. #settings summary
  16. echo "-----------------------------";
  17. echo " Summary";
  18. echo "-----------------------------";
  19. echo "All Node IP Addresses: $nodes";
  20. echo "Add iptable rules: $iptables_add";
  21. echo "";
  22. #verify
  23. read -p 'Is the information correct (y/n): ' verified
  24. if [ .$verified != ."y" ]; then
  25. echo "Goodbye";
  26. exit 0;
  27. fi
  28. #iptables rules
  29. if [ .$iptables_add = ."y" ]; then
  30. for node in $nodes; do
  31. iptables -A INPUT -j ACCEPT -p tcp --dport 5432 -s ${node}/32
  32. iptables -A INPUT -j ACCEPT -p tcp --dport 22000 -s ${node}/32
  33. done
  34. apt-get remove iptables-persistent -y
  35. echo iptables-persistent iptables-persistent/autosave_v4 boolean true | debconf-set-selections
  36. echo iptables-persistent iptables-persistent/autosave_v6 boolean true | debconf-set-selections
  37. apt-get install -y iptables-persistent
  38. fi
  39. #set the working directory
  40. cwd=$(pwd)
  41. cd /tmp
  42. #message to user
  43. echo "Completed"