You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
QA/tests/p_iptables/iptables_default_rules.sh

26 lines
665 B

#!/bin/bash
# Author: Athmane Madjoudj <athmanem@gmail.com>
t_Log "Running $0 - check iptables default rules"
if [ "$centos_ver" -ge 7 ];then
t_Log "CentOS $centos_ver uses firewalld and not iptables -> SKIP"
t_CheckExitStatus 0
exit 0
fi
if [ $SKIP_QA_HARNESS -eq 1 ]; then
echo "Skip, No standard firewall config ..."
else
(grep "state --state ESTABLISHED,RELATED -j ACCEPT" /etc/sysconfig/iptables > /dev/null 2>&1 ) && \
(grep "state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT" /etc/sysconfig/iptables > /dev/null 2>&1 ) && \
(grep "REJECT --reject-with icmp-host-prohibited" /etc/sysconfig/iptables > /dev/null 2>&1 )
fi
t_CheckExitStatus $?