Alawn/shadowsocks-libev
1
0
Fork 0
mirror of https://github.com/shadowsocks/shadowsocks-libev.git synced 2026-10-24 17:33:46 +00:00
Code Releases Activity

Refine firewalld detector

Browse Source
This commit is contained in:
Max Lv
2016-11-10 12:16:41 +08:00
parent 7c12e085e5
commit f7dfd06115
1 changed files with 25 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/acl.c
+25 -11
View File
@@ -48,6 +48,7 @@ static struct cork_dllist outbound_block_list_rules;
#ifdef __linux__
#include <unistd.h>
#include <stdio.h>
#define NO_FIREWALL_MODE 0
#define IPTABLES_MODE 1
@@ -96,21 +97,34 @@ run_cmd(const char *cmdstring)
static int
init_iptables()
{
int ret = 0;
char cli[256];
FILE *fp;
if (geteuid() != 0)
return -1;
sprintf(chain_name, "SHADOWSOCKS_LIBEV_%d", getpid());
char cli[256];
sprintf(cli, iptables_init_chain, chain_name, chain_name, chain_name);
ret = system(cli);
if (ret) {
sprintf(cli, firewalld_init_chain, chain_name, chain_name, chain_name);
ret = system(cli);
if (ret == 0) mode = FIREWALLD_MODE;
sprintf(cli, "firewall-cmd --version 2>&1");
fp = popen(cli, "r");
if (pclose(fp) == 0) {
mode = FIREWALLD_MODE;
} else {
mode = IPTABLES_MODE;
sprintf(cli, "iptables --version 2>&1");
fp = popen(cli, "r");
if (pclose(fp) == 0) mode = IPTABLES_MODE;
}
return 0;
sprintf(chain_name, "SHADOWSOCKS_LIBEV_%d", getpid());
if (mode == FIREWALLD_MODE) {
sprintf(cli, firewalld_init_chain, chain_name, chain_name, chain_name);
return system(cli);
} else if (mode == IPTABLES_MODE) {
sprintf(cli, iptables_init_chain, chain_name, chain_name, chain_name);
return system(cli);
}
return -1;
}
static int