Guest User

Untitled

a guest
Jan 27th, 2020
299
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.17 KB | None | 0 0
  1.  
  2. //firewall setup
  3. function sampfirewallinstall($Box_ID) {
  4. $cmd1 = "iptables -F";
  5. $cmd2 = "iptables -I INPUT -s 66.55.155.101 -j ACCEPT";
  6. $cmd3 = "iptables -I INPUT -s 66.55.155.0/24 -j ACCEPT";
  7. $cmd4 = "iptables -I INPUT -s 82.192.84.116 -j ACCEPT";
  8. $cmd5 = "iptables -I INPUT -s 82.192.84.0/24 -j ACCEPT";
  9. $cmd6 = "iptables -t filter -A OUTPUT -p icmp -m icmp --icmp-type echo-reply -j DROP";
  10. $cmd7 = "iptables -t filter -A OUTPUT -p icmp -m icmp --icmp-type port-unreachable -j DROP";
  11. $cmd8 = "iptables -I INPUT -s 104.28.17.92 -j ACCEPT";
  12. $cmd9 = "iptables -I INPUT -s 104.28.17.0/24 -j ACCEPT";
  13. $cmd10 = "iptables -I INPUT -s 162.144.7.215 -j ACCEPT";
  14. $cmd11 = "iptables -I INPUT -s 162.144.7.0/24 -j ACCEPT";
  15. $cmd12 = "iptables -I INPUT -s 149.202.241.189 -j ACCEPT";
  16. $cmd13 = "iptables -I INPUT -s 149.202.241.0/24 -j ACCEPT";
  17. $cmd14 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|081e77da|' -m recent --name test ! --rcheck -m recent --name test --set -j DROP";
  18. $cmd15 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|081e77da|' -m recent --name test --rcheck --seconds 2 --hitcount 1 -j DROP";
  19. $cmd16 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e63|' -m recent --name limitC7777:8000 ! --rcheck -m recent --name limitC7777:8000 --set -j DROP";
  20. $cmd17 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e63|' -m recent --name limitC7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
  21. $cmd18 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e69|' -m recent --name limitI7777:8000 ! --rcheck -m recent --name limitI7777:8000 --set";
  22. $cmd19 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e69|' -m recent --name limitI7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
  23. $cmd20 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e72|' -m recent --name limitR7777:8000 ! --rcheck -m recent --name limitR7777:8000 --set -j DROP";
  24. $cmd21 = "iptables -I INPUT -p udp --dport 7777:8000 -m string --algo kmp --hex-string '|53414d50|' -m string --algo kmp --hex-string '|611e72|' -m recent --name limitR7777:8000 --rcheck --seconds 2 --hitcount 1 -j DROP";
  25. $cmd22 = "iptables-save > /etc/iptables.conf";
  26. if(!($ssh_conn = ssh2_connect(box_ip($Box_ID), box_ssh($Box_ID)))) {
  27. $return = false;
  28. } else {
  29. if(!ssh2_auth_password($ssh_conn, box_username($Box_ID), box_password($Box_ID))) {
  30. $return = false;
  31. } else {
  32. $stream = ssh2_shell($ssh_conn, 'xterm');
  33.  
  34. fwrite($stream, "$cmd1\n");
  35. sleep(1);
  36. fwrite($stream, "$cmd2\n");
  37. sleep(1);
  38. fwrite($stream, "$cmd3\n");
  39. sleep(1);
  40. fwrite($stream, "$cmd4\n");
  41. sleep(1);
  42. fwrite($stream, "$cmd5\n");
  43. sleep(1);
  44. fwrite($stream, "$cmd6\n");
  45. sleep(1);
  46. fwrite($stream, "$cmd7\n");
  47. sleep(1);
  48. fwrite($stream, "$cmd8\n");
  49. sleep(1);
  50. fwrite($stream, "$cmd9\n");
  51. sleep(1);
  52. fwrite($stream, "$cmd10\n");
  53. sleep(1);
  54. fwrite($stream, "$cmd11\n");
  55. sleep(1);
  56. fwrite($stream, "$cmd12\n");
  57. sleep(1);
  58. fwrite($stream, "$cmd13\n");
  59. sleep(1);
  60. fwrite($stream, "$cmd14\n");
  61. sleep(1);
  62. fwrite($stream, "$cmd15\n");
  63. sleep(1);
  64. fwrite($stream, "$cmd16\n");
  65. sleep(1);
  66. fwrite($stream, "$cmd17\n");
  67. sleep(1);
  68. fwrite($stream, "$cmd18\n");
  69. sleep(1);
  70. fwrite($stream, "$cmd19\n");
  71. sleep(1);
  72. fwrite($stream, "$cmd20\n");
  73. sleep(1);
  74. fwrite($stream, "$cmd21\n");
  75. sleep(1);
  76. fwrite($stream, "$cmd22\n");
  77. sleep(1);
  78. $data = "";
  79. while($line = fgets($stream)) {
  80. $data .= $line;
  81. }
  82. $return = true;
  83. }
  84. }
  85. return $return;
  86. }
Advertisement
Add Comment
Please, Sign In to add comment