Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- //firewall setup
- function sampfirewallinstall($Box_ID) {
- $cmd1 = "iptables -F";
- $cmd2 = "iptables -I INPUT -s 66.55.155.101 -j ACCEPT";
- $cmd3 = "iptables -I INPUT -s 66.55.155.0/24 -j ACCEPT";
- $cmd4 = "iptables -I INPUT -s 82.192.84.116 -j ACCEPT";
- $cmd5 = "iptables -I INPUT -s 82.192.84.0/24 -j ACCEPT";
- $cmd6 = "iptables -t filter -A OUTPUT -p icmp -m icmp --icmp-type echo-reply -j DROP";
- $cmd7 = "iptables -t filter -A OUTPUT -p icmp -m icmp --icmp-type port-unreachable -j DROP";
- $cmd8 = "iptables -I INPUT -s 104.28.17.92 -j ACCEPT";
- $cmd9 = "iptables -I INPUT -s 104.28.17.0/24 -j ACCEPT";
- $cmd10 = "iptables -I INPUT -s 162.144.7.215 -j ACCEPT";
- $cmd11 = "iptables -I INPUT -s 162.144.7.0/24 -j ACCEPT";
- $cmd12 = "iptables -I INPUT -s 149.202.241.189 -j ACCEPT";
- $cmd13 = "iptables -I INPUT -s 149.202.241.0/24 -j ACCEPT";
- $cmd14 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|081e77da|' -m recent --name test ! --rcheck -m recent --name test --set -j DROP";
- $cmd15 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|081e77da|' -m recent --name test --rcheck --seconds 2 --hitcount 1 -j DROP";
- $cmd16 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e63|' -m recent --name limitC7777:8000 ! --rcheck -m recent --name limitC7777:8000 --set -j DROP";
- $cmd17 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e63|' -m recent --name limitC7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
- $cmd18 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e69|' -m recent --name limitI7777:8000 ! --rcheck -m recent --name limitI7777:8000 --set";
- $cmd19 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e69|' -m recent --name limitI7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
- $cmd20 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e72|' -m recent --name limitR7777:8000 ! --rcheck -m recent --name limitR7777:8000 --set -j DROP";
- $cmd21 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e72|' -m recent --name limitR7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
- $cmd22 = "iptables-save > /etc/iptables.conf";
- if(!($ssh_conn = ssh2_connect(box_ip($Box_ID), box_ssh($Box_ID)))) {
- $return = false;
- } else {
- if(!ssh2_auth_password($ssh_conn, box_username($Box_ID), box_password($Box_ID))) {
- $return = false;
- } else {
- $stream = ssh2_shell($ssh_conn, 'xterm');
- fwrite($stream, "$cmd1\n");
- sleep(1);
- fwrite($stream, "$cmd2\n");
- sleep(1);
- fwrite($stream, "$cmd3\n");
- sleep(1);
- fwrite($stream, "$cmd4\n");
- sleep(1);
- fwrite($stream, "$cmd5\n");
- sleep(1);
- fwrite($stream, "$cmd6\n");
- sleep(1);
- fwrite($stream, "$cmd7\n");
- sleep(1);
- fwrite($stream, "$cmd8\n");
- sleep(1);
- fwrite($stream, "$cmd9\n");
- sleep(1);
- fwrite($stream, "$cmd10\n");
- sleep(1);
- fwrite($stream, "$cmd11\n");
- sleep(1);
- fwrite($stream, "$cmd12\n");
- sleep(1);
- fwrite($stream, "$cmd13\n");
- sleep(1);
- fwrite($stream, "$cmd14\n");
- sleep(1);
- fwrite($stream, "$cmd15\n");
- sleep(1);
- fwrite($stream, "$cmd16\n");
- sleep(1);
- fwrite($stream, "$cmd17\n");
- sleep(1);
- fwrite($stream, "$cmd18\n");
- sleep(1);
- fwrite($stream, "$cmd19\n");
- sleep(1);
- fwrite($stream, "$cmd20\n");
- sleep(1);
- fwrite($stream, "$cmd21\n");
- sleep(1);
- fwrite($stream, "$cmd22\n");
- sleep(1);
- $data = "";
- while($line = fgets($stream)) {
- $data .= $line;
- }
- $return = true;
- }
- }
- return $return;
- }
Advertisement
Add Comment
Please, Sign In to add comment