Added firewall script and updated link in readme file.

This commit is contained in:
K 2024-11-19 00:01:46 +05:30
parent 7bcb336698
commit 35d1748b8a
Signed by: notkshitij
GPG Key ID: C5B8BC7530F8F43F
2 changed files with 47 additions and 0 deletions

View File

@ -3,3 +3,7 @@
This repo contains scripts written by me for simplifying my life.
---
- [firewall](https://git.kska.io/notkshitij/scripts/src/branch/main/firewall.sh) - This is a shell script for automatically setting up the firewall on my laptop. Pretty basic stuff using ufw, nothing too fancy!
---

43
firewall.sh Executable file
View File

@ -0,0 +1,43 @@
#!/bin/bash
echo -e "--- MAIN MENU ---\n1. Home profile\n2. Public profile\n3. PANIC MODE\n4. Exit"
read -p "Choose an option: " optn
case optn in
1) # Home profile
for i in {0..5}
do
yes | sudo ufw delete 1
done
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw status verbose
sudo ufw allow in from any to any port 1714:1764 proto tcp # KDE TCP
sudo ufw allow in from any to any port 1714:1764 proto udp # KDE UDP
sudo ufw allow in from 192.168.219.0/24 to any port 22000 # Syncthing TCP
sudo ufw allow in from 192.168.219.0/24 to any port 21027 proto udp # Syncthing UDP
sudo ufw reload
sudo ufw status verbose
;;
2) # Public profile
for i in {0..5}
do
yes | sudo ufw delete 1
done
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw status verbose
;;
3) # Panic mode
for i in {0..7}
do
yes | sudo ufw delete 1
done
sudo ufw default deny incoming
sudo ufw default deny outcoming
sudo ufw status verbose
;;
*) # Default
echo 'Please choose a valid option (1-4).'
;;
esac