Skip to content

Conversation

@HynoR
Copy link
Contributor

@HynoR HynoR commented Nov 7, 2025

What this PR does / why we need it?

Debian系统不会预装ufw或者firewalld,并且有些云厂商系统与ufw可能会产生冲突。
直接控制Iptables来完成防火墙的管理,无需依赖ufw或firewalld。且防火墙启用和禁用不影响 docker 链条,不需要重启 docker

Summary of your change

添加 iptables 解析器,解析本地 iptables 规则
添加 iptables 出入防火墙组1PANEL_INPUT 1PANEL_BASIC 1PANEL_OUTPUT ,用户只能在这两个组上操作放行和拦截行为
启用防火墙组时,将1PANEL_链条分别放到 INPUT 和 OUTPUT 主链条中,禁用时移除出主链条
自行管理规则持久化存储/opt/1panel/firewall/1panel_basic.rules
前端适配

Please indicate you've done the following:

image image image
  • Made sure tests are passing and test coverage is added if needed.
  • Made sure commit message follow the rule of Conventional Commits specification.
  • Considered the docs impact and opened a new docs issue or PR with docs changes if needed.

@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Nov 7, 2025

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Nov 7, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign zhengkunwang223 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@HynoR HynoR force-pushed the feat/ipt2 branch 2 times, most recently from a322653 to 15cd00e Compare November 7, 2025 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant