You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
fw-daemon/main.go

87 lines
1.4 KiB

9 years ago
package main
import (
// _ "net/http/pprof"
"os"
"os/signal"
"time"
"github.com/op/go-logging"
"github.com/subgraph/fw-daemon/nfqueue"
"sync"
)
var log = logging.MustGetLogger("sgfw")
var format = logging.MustStringFormatter(
"%{color}%{time:15:04:05} ▶ %{level:.4s} %{id:03x}%{color:reset} %{message}",
)
func init() {
backend := logging.NewLogBackend(os.Stderr, "", 0)
formatter := logging.NewBackendFormatter(backend, format)
leveler := logging.AddModuleLevel(formatter)
log.SetBackend(leveler)
}
type Firewall struct {
dbus *dbusServer
dns *dnsCache
lock sync.Mutex
policyMap map[string]*Policy
policies []*Policy
}
func (fw *Firewall) runFilter() {
q := nfqueue.NewNFQueue(0)
defer q.Destroy()
q.DefaultVerdict = nfqueue.DROP
q.Timeout = 5 * time.Minute
packets := q.Process()
sigs := make(chan os.Signal, 1)
signal.Notify(sigs, os.Interrupt, os.Kill)
for {
select {
case pkt := <-packets:
fw.filterPacket(pkt)
case <-sigs:
return
}
}
}
func main() {
if os.Geteuid() != 0 {
log.Error("Must be run as root")
os.Exit(1)
}
setupIPTables()
9 years ago
ds, err := newDbusServer()
9 years ago
if err != nil {
log.Error(err.Error())
os.Exit(1)
}
fw := &Firewall{
dbus: ds,
dns: NewDnsCache(),
policyMap: make(map[string]*Policy),
}
fw.loadRules()
/*
go func() {
http.ListenAndServe("localhost:6060", nil)
}()
*/
fw.runFilter()
}