262. SuSEFirewall4Network

Module for handling interfaces in SuSEfirewall2

262.1. Authors

  • Lukas Ocilka <locilka@suse.cz>

262.2. Summary of Module Globals

List of Global Functions

  • ChangedByUser - Functions sets that a firewall proposal was changed by user by editing firewall zone of network interface (applicable during 2nd stage of installation only)

  • FirewallZonesComboBoxItems - Function returns list of items for combo box with all known firewall zones. There's also an item for "" (no zone or fw off).

  • GetZoneOfInterface - Function returns the firewall zone of interface, "" if no zone includes the interface. Error is reported when interface is found in multiple firewall zones, then the first appearance is returned. If firewall is off, "" is returned.

  • IsOn -

  • IsProtectedByFirewall - Function returns if interface is protected by firewall. It means: Firewall is Running and Enabled. Interface is included in any protected firewall zone (means EXT, DMZ or INT).

  • ProtectByFirewall - Functions sets protection of interface by the protect-status.<br> protect==true -> add interface into selected firewall zone, sets firewall to be started and enabled when booting.<br> protect==false -> removes interface from all firewall zones, if there are no other interfaces protected by firewall, stops it and removes it from boot process.

  • Read - Function reads configuration of SuSEFirewall.

  • UnconfiguredIsBlocked -

  • Write - Function writes configuration of SuSEFirewall.

List of Global Variables

    262.3. Global Functions

    262.3.1. ChangedByUser

    Functions sets that a firewall proposal was changed by user by editing firewall zone of network interface (applicable during 2nd stage of installation only)

    Function parameters

    • boolean changed

    Return value

    • void

    262.3.2. FirewallZonesComboBoxItems

    Function returns list of items for combo box with all known firewall zones. There's also an item for "" (no zone or fw off).

    Return value

    • list< list<string> > - item list for CWM

    262.3.3. GetZoneOfInterface

    Function returns the firewall zone of interface, "" if no zone includes the interface. Error is reported when interface is found in multiple firewall zones, then the first appearance is returned. If firewall is off, "" is returned.

    Function parameters

    • string interface

    Return value

    • string - zone

    262.3.4. IsOn

    Return value

    • boolean - whether enabled and started

    262.3.5. IsProtectedByFirewall

    Function returns if interface is protected by firewall. It means: Firewall is Running and Enabled. Interface is included in any protected firewall zone (means EXT, DMZ or INT).

    Function parameters

    • string interface

    Return value

    • boolean - if it is protected

    262.3.6. ProtectByFirewall

    Functions sets protection of interface by the protect-status.<br> protect==true -> add interface into selected firewall zone, sets firewall to be started and enabled when booting.<br> protect==false -> removes interface from all firewall zones, if there are no other interfaces protected by firewall, stops it and removes it from boot process.

    Function parameters

    • string interface

    • string zone

    • boolean protect_status

    Return value

    • boolean - if successful

    262.3.7. Read

    Function reads configuration of SuSEFirewall.

    Return value

    • boolean - if successful

    262.3.8. UnconfiguredIsBlocked

    Return value

    • boolean - Whether the UI should warn about interfaces that are not in any zone

    262.3.9. Write

    Function writes configuration of SuSEFirewall.

    Return value

    • boolean - if successful

    262.4. Global Variables

    262.5. Module Requirements

    262.5.1. Module Imports

    • Stage
    • SuSEFirewall
    • SuSEFirewallProposal

    262.5.2. Module Includes