mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
24f9ba8ee8
The iptables commands in DropPort do not work because setting destination-port flag without specifying the protocol is invalid.
43 lines
1.5 KiB
Go
43 lines
1.5 KiB
Go
// Copyright 2015 CoreOS, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package netutil
|
|
|
|
import (
|
|
"fmt"
|
|
"os/exec"
|
|
)
|
|
|
|
// DropPort drops all tcp packets that are received from the given port and sent to the given port.
|
|
func DropPort(port int) error {
|
|
cmdStr := fmt.Sprintf("sudo iptables -A OUTPUT -p tcp --destination-port %d -j DROP", port)
|
|
if _, err := exec.Command("/bin/sh", "-c", cmdStr).Output(); err != nil {
|
|
return err
|
|
}
|
|
cmdStr = fmt.Sprintf("sudo iptables -A INPUT -p tcp --destination-port %d -j DROP", port)
|
|
_, err := exec.Command("/bin/sh", "-c", cmdStr).Output()
|
|
return err
|
|
}
|
|
|
|
// RecoverPort stops dropping tcp packets at given port.
|
|
func RecoverPort(port int) error {
|
|
cmdStr := fmt.Sprintf("sudo iptables -D OUTPUT -p tcp --destination-port %d -j DROP", port)
|
|
if _, err := exec.Command("/bin/sh", "-c", cmdStr).Output(); err != nil {
|
|
return err
|
|
}
|
|
cmdStr = fmt.Sprintf("sudo iptables -D INPUT -p tcp --destination-port %d -j DROP", port)
|
|
_, err := exec.Command("/bin/sh", "-c", cmdStr).Output()
|
|
return err
|
|
}
|