mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-21 02:37:16 +01:00
66 lines
2.0 KiB
Bash
66 lines
2.0 KiB
Bash
## -*- mode: shell-script; -*-
|
|
##
|
|
## To be able to make changes to the part of configuration created
|
|
## from this configlet you need to copy this file to the directory
|
|
## fwbuilder/configlets/sveasoft/ in your home directory and modify it.
|
|
## Double "##" comments are removed during processing but single "#"
|
|
## comments are be retained and appear in the generated script. Empty
|
|
## lines are removed as well.
|
|
##
|
|
## Configlets support simple macro language with these constructs:
|
|
## {{$var}} is variable expansion
|
|
## {{if var}} is conditional operator.
|
|
##
|
|
##
|
|
## These are commands built-in policy installer runs on the firewall if
|
|
## installation is performed using root account for authentication
|
|
##
|
|
## Variables:
|
|
##
|
|
## {{$fwbpromp}} -- "magic" prompt that installer uses to detect when it is logged in
|
|
## {{$fwdir}} -- directory on the firewall
|
|
## {{$fwscript}} -- script name on the firewall
|
|
## {{$rbtimeout}} -- rollback timeout (min)
|
|
## {{$rbtimeout_sec}} -- rollback timeout (sec)
|
|
##
|
|
## {{$firewall_name}} -- the name of the firewall object
|
|
##
|
|
|
|
|
|
{{if run}}
|
|
|
|
{{if with_compression}}
|
|
echo '{{$fwbprompt}}';
|
|
mv /tmp/{{$fwscript}} /tmp/fwb;
|
|
/usr/sbin/nvram unset rc_firewall;
|
|
/usr/sbin/nvram set rc_firewall="/usr/sbin/nvram get fwb|uudecode|gzip -dc|sh";
|
|
/usr/sbin/nvram unset fwb;
|
|
/usr/sbin/nvram set fwb="`cat /tmp/fwb|gzip|uuencode -`" || exit 1;
|
|
rm /tmp/fwb;
|
|
echo "Saving data to flash memory";
|
|
/usr/sbin/nvram commit || exit 1;
|
|
echo "Flash memory:";
|
|
/usr/sbin/nvram show >/dev/null;
|
|
echo "Activating policy";
|
|
/usr/sbin/nvram get fwb|uudecode|gzip -dc|sh && echo 'Policy activated'
|
|
{{endif}}
|
|
|
|
{{if no_compression}}
|
|
echo '{{$fwbprompt}}';
|
|
mv /tmp/{{$fwscript}} /tmp/fwb;
|
|
/usr/sbin/nvram set rc_firewall="/usr/sbin/nvram get fwb|sh";
|
|
/usr/sbin/nvram unset fwb;
|
|
/usr/sbin/nvram set fwb="`cat /tmp/fwb`" || exit 1;
|
|
rm /tmp/fwb;
|
|
echo "Saving data to flash memory";
|
|
/usr/sbin/nvram commit || exit 1;
|
|
echo "Flash memory:";
|
|
/usr/sbin/nvram show >/dev/null;
|
|
echo "Activating policy";
|
|
/usr/sbin/nvram get fwb|sh && echo 'Policy activated'
|
|
{{endif}}
|
|
|
|
{{endif}}
|
|
|
|
|