external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00
Code Issues Releases Wiki Activity

Merge pull request #1665 from tim-moody/samba-ports

Browse source 
Open Samba ports if enabled
This commit is contained in:
A Holt 2019-05-17 22:23:03 -04:00 • committed by GitHub
commit 3602804c4f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/network/templates/gateway/iiab-gen-iptables
View file

@ -70,6 +70,10 @@ pbx_signaling_ports_chan_sip={{ pbx_signaling_ports_chan_sip }}
pbx_signaling_ports_chan_pjsip={{ pbx_signaling_ports_chan_pjsip }}
pbx_data_ports={{ pbx_data_ports }}
pbx_enabled={{ pbx_enabled }}
samba_enabled={{ samba_enabled }}
samba_udp_ports={{ samba_udp_ports }}
samba_tcp_mports={{ samba_tcp_mports }}
block_DNS={{ block_DNS }}
echo "LAN is $lan and WAN is $wan"
@ -116,6 +120,11 @@ if [ "$services_externally_visible" == "True" ]; then
$IPTABLES -A INPUT -p udp --dport $pbx_signaling_ports_chan_pjsip -m state --state NEW -i $wan -j ACCEPT
$IPTABLES -A INPUT -p udp --dport $pbx_data_ports -m state --state NEW -i $wan -j ACCEPT
fi
if [ "$samba_enabled" == "True" ]; then
$IPTABLES -A INPUT -p udp --dport $samba_udp_ports -m state --state NEW -i $wan -j ACCEPT
$IPTABLES -A INPUT -p tcp -m multiport --dports $samba_tcp_mports -m state --state NEW -i $wan -j ACCEPT
fi
fi
if [ "$iiab_gateway_enabled" == "True" ]; then

4
vars/default_vars.yml
View file

@ -165,7 +165,7 @@ sshd_enabled: True
openvpn_install: True
openvpn_enabled: False
# For /etc/iiab/openvpn_handle
openvpn_handle:
openvpn_handle:
# cron seems necessary on CentOS:
openvpn_cron_enabled: False
# General OpenVPN settings
@ -229,6 +229,8 @@ cups_port: 631
# Samba. Do a security audit seriously before deploying this.
samba_install: False
samba_enabled: False
samba_udp_ports: "137:138"
samba_tcp_mports: "139,445"
shared_dir : "{{ content_base }}/public" # /library/public
# usb-lib