hw_partner
/
urmic_digital_encoder_decoder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

firewall updtae

This commit is contained in:
Devdatt Bhatt 2026-05-17 14:37:21 +00:00
parent 4c847a59c3
commit d5bcde0fad
1 changed files with 66 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

103
encoder/firewall.php
View File

@ -28,43 +28,60 @@ if (is_file($jsonFile)) {
} }
} }
// Function to get UFW status
function getUfwStatus() {
$status = shell_exec("sudo ufw status");
return (strpos($status, 'Status: active') !== false) ? 'enabled' : 'disabled';
}
$currentStatus = getUfwStatus();
if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($_SERVER['REQUEST_METHOD'] === 'POST') {
exec("echo y | sudo ufw reset"); if (isset($_POST['toggle_status'])) {
exec("sudo ufw default allow outgoing"); if ($_POST['toggle_status'] === 'enable') {
exec("sudo ufw default deny incoming"); exec("sudo ufw --force enable");
exec("sudo ufw allow proto udp to 224.0.0.0/4");
exec("sudo ufw route allow proto udp to 224.0.0.0/4");
exec("sudo ufw deny out to 239.255.254.254 port 39000 proto udp");
foreach ($defaults as $port => $_) {
$data[$port] = trim($_POST["port_$port"] ?? '');
}
$tmp = $jsonFile . '.tmp';
file_put_contents(
$tmp,
json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES)
);
rename($tmp, $jsonFile);
foreach ($data as $port => $value) {
$tmp = array_filter(
array_map('trim', explode(',', (string)$value)),
'strlen'
);
if (count($tmp) > 0) {
foreach ($tmp as $ip) {
exec("sudo ufw allow from " . $ip." to any port " . $port . " proto tcp");
}
} else { } else {
exec("sudo ufw allow " . $port); exec("sudo ufw disable");
} }
} $currentStatus = getUfwStatus();
} else {
exec("echo y | sudo ufw reset");
exec("sudo ufw default allow outgoing");
exec("sudo ufw default deny incoming");
exec("sudo ufw allow proto udp to 224.0.0.0/4");
exec("sudo ufw route allow proto udp to 224.0.0.0/4");
exec("sudo ufw deny out to 239.255.254.254 port 39000 proto udp");
exec("sudo ufw allow from 172.16.111.112 to 172.16.111.111 port 8080"); foreach ($defaults as $port => $_) {
exec("sudo ufw --force enable"); $data[$port] = trim($_POST["port_$port"] ?? '');
exec("sudo ufw reload"); }
$tmp = $jsonFile . '.tmp';
file_put_contents(
$tmp,
json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES)
);
rename($tmp, $jsonFile);
foreach ($data as $port => $value) {
$tmp = array_filter(
array_map('trim', explode(',', (string)$value)),
'strlen'
);
if (count($tmp) > 0) {
foreach ($tmp as $ip) {
exec("sudo ufw allow from " . $ip." to any port " . $port . " proto tcp");
}
} else {
exec("sudo ufw allow " . $port);
}
}
exec("sudo ufw allow from 172.16.111.112 to 172.16.111.111 port 8080");
exec("sudo ufw --force enable");
exec("sudo ufw reload");
}
} }
?> ?>
@ -102,7 +119,19 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
<div class="containerindex"> <div class="containerindex">
<div class="grid"> <div class="grid">
<div class="card wide"> <div class="card wide">
<h2>Limit Access</h2> <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 20px;">
<h2 style="margin: 0;">Limit Access</h2>
<div style="text-align: right;">
<span style="padding: 5px 10px; border-radius: 4px; background: <?= $currentStatus === 'enabled' ? '#d4edda' : '#f8d7da' ?>; color: <?= $currentStatus === 'enabled' ? '#155724' : '#721c24' ?>; font-weight: bold; margin-right: 10px;">
UFW: <?= ucfirst($currentStatus) ?>
</span>
<form method="post" style="display: inline;">
<button type="submit" name="toggle_status" value="<?= $currentStatus === 'enabled' ? 'disable' : 'enable' ?>" style="background: <?= $currentStatus === 'enabled' ? '#dc3545' : '#28a745' ?>; color: white; border: none; padding: 5px 10px; border-radius: 4px; cursor: pointer;">
<?= $currentStatus === 'enabled' ? 'Disable' : 'Enable' ?>
</button>
</form>
</div>
</div>
<form method="post"> <form method="post">
<?php foreach ($data as $port => $value): ?> <?php foreach ($data as $port => $value): ?>
@ -114,12 +143,12 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
placeholder="IPv4, IPv6 (comma separated)"><?= htmlspecialchars($value) ?></textarea> placeholder="IPv4, IPv6 (comma separated)"><?= htmlspecialchars($value) ?></textarea>
<small>Example: 192.168.1.10/24, 2001:db8::1</small> <small>Example: 192.168.1.10/24, 2001:db8::1</small>
</div> </div >
<?php endforeach; ?> <?php endforeach; ?>
<button type="submit">Limit Access</button> <button type="submit">Limit Access</button>
</form> </form>
</div> </div >
</div> </div >
</div> </div >
<?php include 'footer.php' ?> <?php include 'footer.php' ?>