Page MenuHomeVyOS Platform
Files F118306062

generate_firewall_rule-resequence.py
No OneTemporary
Actions

Size
4 KB
Referenced Files
None
Subscribers
None

generate_firewall_rule-resequence.py
View Options

#!/usr/bin/env python3
#
# Copyright (C) 2023 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
import argparse
from vyos.configquery import ConfigTreeQuery
def convert_to_set_commands(config_dict, parent_key=''):
"""
Converts a configuration dictionary into a list of set commands.
Args:
config_dict (dict): The configuration dictionary.
parent_key (str): The parent key for nested dictionaries.
Returns:
list: A list of set commands.
"""
commands = []
for key, value in config_dict.items():
current_key = parent_key + key if parent_key else key
if isinstance(value, dict):
if not value:
commands.append(f"set {current_key}")
else:
commands.extend(
convert_to_set_commands(value, f"{current_key} "))
elif isinstance(value, str):
commands.append(f"set {current_key} '{value}'")
return commands
def change_rule_numbers(config_dict, start, step):
"""
Changes rule numbers in the configuration dictionary.
Args:
config_dict (dict): The configuration dictionary.
start (int): The starting rule number.
step (int): The step to increment the rule numbers.
Returns:
None
"""
if 'rule' in config_dict:
rule_dict = config_dict['rule']
updated_rule_dict = {}
rule_num = start
for rule_key in sorted(rule_dict.keys()):
updated_rule_dict[str(rule_num)] = rule_dict[rule_key]
rule_num += step
config_dict['rule'] = updated_rule_dict
for key in config_dict:
if isinstance(config_dict[key], dict):
change_rule_numbers(config_dict[key], start, step)
def convert_rule_keys_to_int(config_dict):
"""
Converts rule keys in the configuration dictionary to integers.
Args:
config_dict (dict or list): The configuration dictionary or list.
Returns:
dict or list: The modified dictionary or list.
"""
if isinstance(config_dict, dict):
new_dict = {}
for key, value in config_dict.items():
# Convert key to integer if possible
new_key = int(key) if key.isdigit() else key
# Recur for nested dictionaries
if isinstance(value, dict):
new_value = convert_rule_keys_to_int(value)
else:
new_value = value
new_dict[new_key] = new_value
return new_dict
elif isinstance(config_dict, list):
return [convert_rule_keys_to_int(item) for item in config_dict]
else:
return config_dict
if __name__ == "__main__":
# Parse command-line arguments
parser = argparse.ArgumentParser(description='Convert dictionary to set commands with rule number modifications.')
parser.add_argument('--start', type=int, default=100, help='Start rule number')
parser.add_argument('--step', type=int, default=10, help='Step for rule numbers (default: 10)')
args = parser.parse_args()
config = ConfigTreeQuery()
if not config.exists('firewall'):
print('Firewall is not configured')
exit(1)
config_dict = config.get_config_dict('firewall')
# Remove global-options, group and flowtable as they don't need sequencing
if 'global-options' in config_dict['firewall']:
del config_dict['firewall']['global-options']
if 'group' in config_dict['firewall']:
del config_dict['firewall']['group']
if 'flowtable' in config_dict['firewall']:
del config_dict['firewall']['flowtable']
# Convert rule keys to integers, rule "10" -> rule 10
# This is necessary for sorting the rules
config_dict = convert_rule_keys_to_int(config_dict)
# Apply rule number modifications
change_rule_numbers(config_dict, start=args.start, step=args.step)
# Convert to 'set' commands
set_commands = convert_to_set_commands(config_dict)
print()
for command in set_commands:
print(command)
print()

File Metadata

Mime Type
text/x-script.python
Expires
Sat, Oct 17, 12:11 AM (1 d, 16 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
4386613
Default Alt Text
generate_firewall_rule-resequence.py (4 KB)

Event Timeline