diff options
Diffstat (limited to 'bin/ncp/SECURITY/UFW.sh')
-rw-r--r-- | bin/ncp/SECURITY/UFW.sh | 75 |
1 files changed, 75 insertions, 0 deletions
diff --git a/bin/ncp/SECURITY/UFW.sh b/bin/ncp/SECURITY/UFW.sh new file mode 100644 index 00000000..791a4b1f --- /dev/null +++ b/bin/ncp/SECURITY/UFW.sh @@ -0,0 +1,75 @@ +#!/bin/bash + +# Uncomplicated Firewall +# +# Copyleft 2017 by Ignacio Nunez Hernanz <nacho _a_t_ ownyourbits _d_o_t_ com> +# GPL licensed (see end of file) * Use at your own risk! +# +# More at https://ownyourbits.com/2017/02/13/nextcloud-ready-raspberry-pi-image/ +# + + + +install() +{ + apt-get update + DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ufw + systemctl disable ufw + + # Disable logging to kernel + grep -q maxsize /etc/logrotate.d/ufw || sed -i /weekly/amaxsize2M /etc/logrotate.d/ufw +} + +configure() +{ + [[ "$ACTIVE" != yes ]] && { + ufw --force reset + systemctl disable ufw + systemctl stop ufw + echo "UFW disabled" + return 0 + } + ufw --force enable + systemctl enable ufw + systemctl start ufw + + echo -e "\n# web server rules" + ufw allow $HTTP/tcp + ufw allow $HTTPS/tcp + ufw allow 4443/tcp + + echo -e "\n# SSH rules" + ufw allow $SSH + + echo -e "\n# DNS rules" + ufw allow dns + + echo -e "\n# SAMBA rules" + ufw allow samba + + echo -e "\n# NFS rules" + ufw allow nfs + + echo -e "\n# UPnP rules" + ufw allow proto udp from 192.168.0.0/16 + + echo "UFW enabled" +} + +# License +# +# This script is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# This script is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this script; if not, write to the +# Free Software Foundation, Inc., 59 Temple Place, Suite 330, +# Boston, MA 02111-1307 USA + |