6 Commits

Author SHA1 Message Date
Sunil Mohan Adapa
1c338e538a Convert firewall page to template 2014-05-08 09:05:50 +05:30
Sunil Mohan Adapa
4b44741c68 Remove unnecessary layer of abstraction over template rendering 2014-05-05 00:08:58 +05:30
Nick Daly
9b3543c764 Allow services to be both internal and external again.
Reverting part of 887518ce on Sunil's advice:

    An assumption made for the sake of simple API is that all
    externally available services are also available internally. They
    are not mutually exclusive.

    Your change will enable a service only if it is not externally
    available. For example, HTTPS is externally available. It will no
    longer be made internally available. Which is not right.

    We should either revert this line or introduce a way to mark all
    the services as internal as well and write code handle that
    properly.
2014-04-28 22:50:45 -05:00
Nick Daly
887518ce88 Be explicit about running commands as the superuser.
superuser=True is a surprising default.  Not happy-rainbow-surprising
but more dropping-a-large-rock-on-your-foot surprising.
2014-04-28 20:12:20 -05:00
Sunil Mohan Adapa
3ef1ed83ce Add support for zones in firewall service 2014-04-27 18:16:32 +05:30
Sunil Mohan Adapa
32144e96ef Basic firewall sevice based on FirewallD
- Ports are allowed in default zone as soon as a service is enabled
- Ports are disabled when all services depending on the port are disabled
- Shows current enabled state of services and their each of thier ports
2014-04-18 12:53:27 +05:30