?? name_service.pm
字號:
## name_service.pm: Fwctl service module to handle the DNS protocol.## This file is part of Fwctl.## Author: Francis J. Lacoste <francis@iNsu.COM>## Copyright (c) 1999,2000 iNsu Innovations Inc.## This program is free software; you can redistribute it and/or modify# it under the terms of the GNU General Public License as published by# the Free Software Foundation; either version 2 of the License, or# (at your option) any later version.#package Fwctl::Services::name_service;use strict;use Fwctl::RuleSet qw(:tcp_rulesets :udp_rulesets :masq :ports);use IPChains;sub new { my $proto = shift; my $class = ref $proto || $proto; bless { query_port => UNPRIVILEGED_PORTS, }, $class;}sub prototypes { my ($self,$target,$options) = @_; # Build prototype rule ( IPChains->new( Rule => $target, Prot => 'udp', DestPort => 'domain', %{$options->{ipchains}}, ), IPChains->new( Rule => $target, Prot => 'tcp', SourcePort => UNPRIVILEGED_PORTS, DestPort => 'domain', %{$options->{ipchains}}, ), );}sub block_rules { my $self = shift; my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_; my ($udp,$tcp) = $self->prototypes( $target, $options ); my $query; if ( $options->{server} ) { $query = undef; } else { $query = $options->{"query-port"} || $self->{query_port}; } $udp->attribute( SourcePort => $query ); block_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if ); block_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if );}sub accept_rules { my $self = shift; my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_; my ($udp,$tcp) = $self->prototypes( $target, $options ); my $masq = defined $options->{portfw} ? PORTFW : $options->{masq} ? MASQ : NOMASQ; my $query; if ( $options->{server} ) { $query = undef; } else { $query = $options->{"query-port"} || $self->{query_port}; } $udp->attribute( SourcePort => $query ); accept_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if, $masq, $options->{portfw} ); accept_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if, $masq, $options->{portfw} );}sub account_rules { my $self = shift; my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_; my ($udp,$tcp) = $self->prototypes( $target, $options ); my $masq = defined $options->{portfw} ? PORTFW : $options->{masq} ? MASQ : NOMASQ; my $query; if ( $options->{server} ) { $query = undef; } else { $query = $options->{"query-port"} || $self->{query_port}; } $udp->attribute( SourcePort => $query ); acct_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if, $masq ); acct_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if, $masq );}sub valid_options { my $self = shift; ( "query-port=s", "server" );}1;=pod=head1 NAMEFwctl::Services::name_service - Fwctl module to handle the DNS protocol.=head1 SYNOPSIS accept name_service -src INTERNET -dst NAME_SERVER accept name_service -src NAME_SERVER -dst INTERNET -query-port 5353=head1 DESCRIPTIONThe name_service module handles the DNS protocol. It can handle bothname server and resolver configuration. When using the I<server>option, the query can be from any ports. You can use the I<query-port>option to specify the client port.Default is to use only ports > 1023 as client port. (Usual resolversituation.)=head1 AUTHORFrancis J. Lacoste <francis.lacoste@iNsu.COM>=head1 COPYRIGHTCopyright (c) 1999,2000 iNsu Innovations Inc.All rights reserved.This program is free software; you can redistribute it and/or modifyit under the terms of the GNU General Public License as published bythe Free Software Foundation; either version 2 of the License, or(at your option) any later version.=head1 SEE ALSOfwctl(8) Fwctl(3) Fwctl::RuleSet(3)=cut
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -