| Path : /usr/share/YaST2/modules/ |
| Current File : //usr/share/YaST2/modules/SuSEFirewallProposal.ybc |
YaST bytecode 1.4.0 SuSEFirewallProposal ! SuSEFirewallProposal.ycp SuSEFirewall ProductFeatures Linuxrc Package SuSEFirewallServices proposal_changed_by_user proposal_initialized known_interfaces warnings_now
vnc_fallback_ports vnc_service ssh_service
AddWarning
ClearWarnings GetWarnings SetKnownInterfaces GetKnownInterfaces IsDialUpInterface SetInterfacesToZone UpdateProposal ServiceEnabled EnableFallbackPorts OpenServiceOnNonDialUpInterfaces IsXenInstalled ProposeFunctions SetChangedByUser GetChangedByUser SetProposalInitialized GetProposalInitialized Reset Propose ProposalSummary service fallback_ports t changed ~ initialized ! 0 base3 SuSEFirewall Read special_all_interface_zone IsServiceSupportedInZone IsAnyNetworkInterfaceSupported SuSEFirewallIsInstalled
ResetReadFlag SetStartService GetEnableService SetEnableService GetZoneOfInterface GetZonesOfInterfaces GetAllNonDialUpInterfaces + GetZonesOfInterfacesWithAnyFeatureSupported GetAllKnownInterfaces GetAllDialUpInterfaces GetListOfKnownInterfaces AddInterfaceIntoZone HaveService
AddService GetServices SetServicesForZones
AddXenSupport 3 ProductFeatures GetBooleanFeature 3 Linuxrc vnc usessh 3 Package Installed 3 SuSEFirewallServices IsKnownService $ $ $ $" $$
5801 5901$' service:xorg-x11-server$) service:sshd%4
warning &5 add %; &< %D -E %M
interfaces &N %X -Y %a interface all_interfaces interface_type $b $d ,e foreach one (f id -f &h type -k dialup%t
interfaces zone ,u foreach interface ,v %} last_known_interfaces currently_known_interfaces had_dialup_interfaces $~ $ $ , foreach this_interface ( 4 & . , foreach interface ( contains - ( - ( && ! 4 ,
sformat
F New network device '%1' found; added as an internal firewall interface base , INT4 ,
sformat
F New network device '%1' found; added as an external firewall interface base , EXT, % service zones
serenabled serstat ( || 4 ,
y2error
Ups, service: %1? - ( || 4 ,
y2error
Ups, zones: %1? - $ $ , foreach one_zone ( 4 ,
y2milestone
Service %1 is not enabled in %2 & . - % fallback_ports zones ,
y2warning
( Enabling fallback ports: %1 in zones: %2 , foreach one_zone , foreach one_port
,
TCP % non_dial_up_interfaces dial_up_interfaces $ $ ( size 4 non_dial_up_interfaces_zones $ ( 4 ,
y2milestone
. Opening service %1 on interfaces %2 (zones %3) , ( || 4 , ( size 4 dial_up_interfaces_zones $ ( 4 ,
y2warning
. Opening service %1 on interfaces %2 (zones %3) , ( || 4 , ( size 4 ( 4 ( 4 ,
y2warning
F WARNING: Opening %1 for the External zone without any known interface! toupper , ,
y2milestone
By now, %1 for %2 zone is %3 4 , % (
kernel-xen- (
kernel-xenpae- - % known_interfaces dial_up_interfaces non_dup_interfaces $! $# $$ ,% foreach interface (& type dial_up4& &' add id 4( &) add id ,-
y2milestone
B Proposal based on configuration: Dial-up interfaces: %1, Other: %2 (2 || size size 42 ,3 globals enable_firewall,4 globals enable_firewall (8 && size size 48 ,9 INT,: EXT(; globals firewall_enable_ssh,< INT EXT (? && size size 4? ,@ EXT(A globals firewall_enable_ssh,B EXT (E && size size 4E ,F EXT(G globals firewall_enable_ssh,H EXT (S 4S ,T
y2milestone
N This is an installation over VNC, opening VNC on all non-dial-up interfaces...,W
(Y 4Y ,Z
y2milestone
N This is an installation over SSH, opening SSH on all non-dial-up interfaces...,] ssh (c 4c ,d
y2milestone
2 Adding Xen support into the firewall configuration,e ,h %t ,u
y2milestone
Proposal was changed by user&v %~ - % & % - % , , % ( ! 4 , , - ( ! 4 ,
y2milestone
' Calling firewall configuration proposal, , 4 ,
y2milestone
. Calling firewall configuration update proposal, % output warning firewall_is_enabled $ $ ( ! 4 & + + <ul>B SuSEfirewall2 package is not installed, firewall will be disabled. base </ul>- output warning $ & + <ul>
& + + + <li> R Firewall is enabled (<a href="firewall--disable_firewall_in_proposal">disable</a>) baseQ Firewall is disabled (<a href="firewall--enable_firewall_in_proposal">enable</a>) base </li>
( 4 is_ssh_enabled warnings_strings $ ( size 4
used_zones ,
y2milestone
Interfaces: %1 $ ,
y2milestone
Zones used by firewall: %1 , foreach zone ( || ssh TCP 4 & & + + + <li> H SSH port is open (<a href="firewall--disable_ssh_in_proposal">close</a>) baseI SSH port is blocked (<a href="firewall--enable_ssh_in_proposal">open</a>) base </li>
( && 4 & & + + + <li>~ SSH port is open (<a href="firewall--disable_ssh_in_proposal">close</a>), but there are still no network interfaces configured base </li> ,
y2milestone
+ + SSH is not enabled( 4 (
! ,
[ You are installing a system over SSH, but you have not opened the SSH port on the firewall. base ( 4 is_vnc_enabled $ ( size 4 , foreach zone
(
4 & 4 set_vnc_enabled_to $ , foreach one_port
(
TCP
4 & . (" &" ,'
y2milestone
+ + VNC port is open blocked in the firewall&) + + + <li> b Remote Administration (VNC) ports are open (<a href="firewall--disable_vnc_in_proposal">close</a>) basec Remote Administration (VNC) ports are blocked (<a href="firewall--enable_vnc_in_proposal">open</a>) base </li>
(3 ! ,5
u You are installing a system using remote administration (VNC), but you have not opened the VNC ports on the firewall. base $8 (9 size 49 ,: ,; foreach single_warning &< + + + <li> </li>
&> + + <ul>
</ul>
&B + </ul>
-D output warning