@@ -30,10 +30,9 @@ if [[ $(which apt-get 2>&-) != "" ]]; then
30
30
apt_install tftpd-hpa
31
31
# apt_install openbsd-inetd
32
32
apt_install netatalk
33
- # apt_install nfs-kernel-server
33
+ apt_install nfs-kernel-server
34
34
apt_install python-configparser
35
- fi
36
- if [[ $( which yum 2>& -) != " " ]]; then
35
+ elif [[ $( which yum 2>& -) != " " ]]; then
37
36
yum_install avahi
38
37
yum_install samba
39
38
yum_install samba-client
@@ -56,12 +55,14 @@ if [[ $(which yum 2>&-) != "" ]]; then
56
55
fi
57
56
sed -i ' s/.*- -tcp -noddp -uamlist uams_dhx.so.*/- -tcp -noddp -uamlist uams_dhx.so,uams_dhx2_passwd.so/' /etc/netatalk/afpd.conf
58
57
fi
59
- # yum_install nfs-utils
58
+ yum_install nfs-utils
60
59
yum_install vim-common
61
60
chkconfig messagebus on >> $logFile 2>&1
62
61
chkconfig avahi-daemon on >> $logFile 2>&1
62
+ chkconfig rpcbind on >> $logFile 2>&1
63
63
service messagebus start >> $logFile 2>&1
64
64
service avahi-daemon start >> $logFile 2>&1
65
+ service rpcbind start >> $logFile 2>&1
65
66
fi
66
67
67
68
# Prepare the firewall in case it is enabled later
@@ -78,14 +79,14 @@ if [[ $(which ufw 2>&-) != "" ]]; then
78
79
# TFTP
79
80
ufw allow 69/udp >> $logFile
80
81
# NFS
81
- # ufw allow 111/tcp >> $logFile
82
- # ufw allow 111/udp >> $logFile
83
- # ufw allow 892/tcp >> $logFile
84
- # ufw allow 892/udp >> $logFile
85
- # ufw allow 2049/tcp >> $logFile
86
- # ufw allow 2049/udp >> $logFile
87
- # ufw allow 32769/udp >> $logFile
88
- # ufw allow 32803/tcp >> $logFile
82
+ ufw allow 111/tcp >> $logFile
83
+ ufw allow 111/udp >> $logFile
84
+ ufw allow 892/tcp >> $logFile
85
+ ufw allow 892/udp >> $logFile
86
+ ufw allow 2049/tcp >> $logFile
87
+ ufw allow 2049/udp >> $logFile
88
+ ufw allow 32769/udp >> $logFile
89
+ ufw allow 32803/tcp >> $logFile
89
90
elif [[ $( which firewall-cmd 2>& -) != " " ]]; then
90
91
# HTTP
91
92
firewall-cmd --zone=public --add-port=80/tcp >> $logFile 2>&1
@@ -105,22 +106,22 @@ elif [[ $(which firewall-cmd 2>&-) != "" ]]; then
105
106
firewall-cmd --zone=public --add-port=69/udp >> $logFile 2>&1
106
107
firewall-cmd --zone=public --add-port=69/udp --permanent >> $logFile 2>&1
107
108
# NFS
108
- # firewall-cmd --zone=public --add-port=111/tcp >> $logFile 2>&1
109
- # firewall-cmd --zone=public --add-port=111/tcp --permanent >> $logFile 2>&1
110
- # firewall-cmd --zone=public --add-port=111/udp >> $logFile 2>&1
111
- # firewall-cmd --zone=public --add-port=111/udp --permanent >> $logFile 2>&1
112
- # firewall-cmd --zone=public --add-port=892/tcp >> $logFile 2>&1
113
- # firewall-cmd --zone=public --add-port=892/tcp --permanent >> $logFile 2>&1
114
- # firewall-cmd --zone=public --add-port=892/udp >> $logFile 2>&1
115
- # firewall-cmd --zone=public --add-port=892/udp --permanent >> $logFile 2>&1
116
- # firewall-cmd --zone=public --add-port=2049/tcp >> $logFile 2>&1
117
- # firewall-cmd --zone=public --add-port=2049/tcp --permanent >> $logFile 2>&1
118
- # firewall-cmd --zone=public --add-port=2049/udp >> $logFile 2>&1
119
- # firewall-cmd --zone=public --add-port=2049/udp --permanent >> $logFile 2>&1
120
- # firewall-cmd --zone=public --add-port=32769/udp >> $logFile 2>&1
121
- # firewall-cmd --zone=public --add-port=32769/udp --permanent >> $logFile 2>&1
122
- # firewall-cmd --zone=public --add-port=32803/tcp >> $logFile 2>&1
123
- # firewall-cmd --zone=public --add-port=32803/tcp --permanent >> $logFile 2>&1
109
+ firewall-cmd --zone=public --add-port=111/tcp >> $logFile 2>&1
110
+ firewall-cmd --zone=public --add-port=111/tcp --permanent >> $logFile 2>&1
111
+ firewall-cmd --zone=public --add-port=111/udp >> $logFile 2>&1
112
+ firewall-cmd --zone=public --add-port=111/udp --permanent >> $logFile 2>&1
113
+ firewall-cmd --zone=public --add-port=892/tcp >> $logFile 2>&1
114
+ firewall-cmd --zone=public --add-port=892/tcp --permanent >> $logFile 2>&1
115
+ firewall-cmd --zone=public --add-port=892/udp >> $logFile 2>&1
116
+ firewall-cmd --zone=public --add-port=892/udp --permanent >> $logFile 2>&1
117
+ firewall-cmd --zone=public --add-port=2049/tcp >> $logFile 2>&1
118
+ firewall-cmd --zone=public --add-port=2049/tcp --permanent >> $logFile 2>&1
119
+ firewall-cmd --zone=public --add-port=2049/udp >> $logFile 2>&1
120
+ firewall-cmd --zone=public --add-port=2049/udp --permanent >> $logFile 2>&1
121
+ firewall-cmd --zone=public --add-port=32769/udp >> $logFile 2>&1
122
+ firewall-cmd --zone=public --add-port=32769/udp --permanent >> $logFile 2>&1
123
+ firewall-cmd --zone=public --add-port=32803/tcp >> $logFile 2>&1
124
+ firewall-cmd --zone=public --add-port=32803/tcp --permanent >> $logFile 2>&1
124
125
else
125
126
# HTTP
126
127
if iptables -L | grep DROP | grep -v ' tcp dpt:https' | grep -q ' tcp dpt:http' ; then
@@ -164,54 +165,54 @@ else
164
165
iptables -I INPUT -p udp --dport 69 -j ACCEPT
165
166
fi
166
167
# NFS
167
- # if iptables -L | grep DROP | grep -q 'tcp dpt:sunrpc' ; then
168
- # iptables -D INPUT -p tcp --dport 111 -j DROP
169
- # fi
170
- # if ! iptables -L | grep ACCEPT | grep -q 'tcp dpt:sunrpc' ; then
171
- # iptables -I INPUT -p tcp --dport 111 -j ACCEPT
172
- # fi
173
- # if iptables -L | grep DROP | grep -q 'udp dpt:sunrpc' ; then
174
- # iptables -D INPUT -p udp --dport 111 -j DROP
175
- # fi
176
- # if ! iptables -L | grep ACCEPT | grep -q 'udp dpt:sunrpc' ; then
177
- # iptables -I INPUT -p udp --dport 111 -j ACCEPT
178
- # fi
179
- # if iptables -L | grep DROP | grep -q 'tcp dpt:892' ; then
180
- # iptables -D INPUT -p tcp --dport 892 -j DROP
181
- # fi
182
- # if ! iptables -L | grep ACCEPT | grep -q 'tcp dpt:892' ; then
183
- # iptables -I INPUT -p tcp --dport 892 -j ACCEPT
184
- # fi
185
- # if iptables -L | grep DROP | grep -q 'udp dpt:892' ; then
186
- # iptables -D INPUT -p udp --dport 892 -j DROP
187
- # fi
188
- # if ! iptables -L | grep ACCEPT | grep -q 'udp dpt:892' ; then
189
- # iptables -I INPUT -p udp --dport 892 -j ACCEPT
190
- # fi
191
- # if iptables -L | grep DROP | grep -q 'tcp dpt:nfs' ; then
192
- # iptables -D INPUT -p tcp --dport 2049 -j DROP
193
- # fi
194
- # if ! iptables -L | grep ACCEPT | grep -q 'tcp dpt:nfs' ; then
195
- # iptables -I INPUT -p tcp --dport 2049 -j ACCEPT
196
- # fi
197
- # if iptables -L | grep DROP | grep -q 'udp dpt:nfs' ; then
198
- # iptables -D INPUT -p udp --dport 2049 -j DROP
199
- # fi
200
- # if ! iptables -L | grep ACCEPT | grep -q 'udp dpt:nfs' ; then
201
- # iptables -I INPUT -p udp --dport 2049 -j ACCEPT
202
- # fi
203
- # if iptables -L | grep DROP | grep -q 'udp dpt:filenet-rpc' ; then
204
- # iptables -D INPUT -p udp --dport 32769 -j DROP
205
- # fi
206
- # if ! iptables -L | grep ACCEPT | grep -q 'udp dpt:filenet-rpc' ; then
207
- # iptables -I INPUT -p udp --dport 32769 -j ACCEPT
208
- # fi
209
- # if iptables -L | grep DROP | grep -q 'tcp dpt:32803' ; then
210
- # iptables -D INPUT -p tcp --dport 32803 -j DROP
211
- # fi
212
- # if ! iptables -L | grep ACCEPT | grep -q 'tcp dpt:32803' ; then
213
- # iptables -I INPUT -p tcp --dport 32803 -j ACCEPT
214
- # fi
168
+ if iptables -L | grep DROP | grep -q ' tcp dpt:sunrpc' ; then
169
+ iptables -D INPUT -p tcp --dport 111 -j DROP
170
+ fi
171
+ if ! iptables -L | grep ACCEPT | grep -q ' tcp dpt:sunrpc' ; then
172
+ iptables -I INPUT -p tcp --dport 111 -j ACCEPT
173
+ fi
174
+ if iptables -L | grep DROP | grep -q ' udp dpt:sunrpc' ; then
175
+ iptables -D INPUT -p udp --dport 111 -j DROP
176
+ fi
177
+ if ! iptables -L | grep ACCEPT | grep -q ' udp dpt:sunrpc' ; then
178
+ iptables -I INPUT -p udp --dport 111 -j ACCEPT
179
+ fi
180
+ if iptables -L | grep DROP | grep -q ' tcp dpt:892' ; then
181
+ iptables -D INPUT -p tcp --dport 892 -j DROP
182
+ fi
183
+ if ! iptables -L | grep ACCEPT | grep -q ' tcp dpt:892' ; then
184
+ iptables -I INPUT -p tcp --dport 892 -j ACCEPT
185
+ fi
186
+ if iptables -L | grep DROP | grep -q ' udp dpt:892' ; then
187
+ iptables -D INPUT -p udp --dport 892 -j DROP
188
+ fi
189
+ if ! iptables -L | grep ACCEPT | grep -q ' udp dpt:892' ; then
190
+ iptables -I INPUT -p udp --dport 892 -j ACCEPT
191
+ fi
192
+ if iptables -L | grep DROP | grep -q ' tcp dpt:nfs' ; then
193
+ iptables -D INPUT -p tcp --dport 2049 -j DROP
194
+ fi
195
+ if ! iptables -L | grep ACCEPT | grep -q ' tcp dpt:nfs' ; then
196
+ iptables -I INPUT -p tcp --dport 2049 -j ACCEPT
197
+ fi
198
+ if iptables -L | grep DROP | grep -q ' udp dpt:nfs' ; then
199
+ iptables -D INPUT -p udp --dport 2049 -j DROP
200
+ fi
201
+ if ! iptables -L | grep ACCEPT | grep -q ' udp dpt:nfs' ; then
202
+ iptables -I INPUT -p udp --dport 2049 -j ACCEPT
203
+ fi
204
+ if iptables -L | grep DROP | grep -q ' udp dpt:filenet-rpc' ; then
205
+ iptables -D INPUT -p udp --dport 32769 -j DROP
206
+ fi
207
+ if ! iptables -L | grep ACCEPT | grep -q ' udp dpt:filenet-rpc' ; then
208
+ iptables -I INPUT -p udp --dport 32769 -j ACCEPT
209
+ fi
210
+ if iptables -L | grep DROP | grep -q ' tcp dpt:32803' ; then
211
+ iptables -D INPUT -p tcp --dport 32803 -j DROP
212
+ fi
213
+ if ! iptables -L | grep ACCEPT | grep -q ' tcp dpt:32803' ; then
214
+ iptables -I INPUT -p tcp --dport 32803 -j ACCEPT
215
+ fi
215
216
service iptables save >> $logFile 2>&1
216
217
fi
217
218
@@ -340,34 +341,34 @@ if [ ! -d "/home/afpuser" ]; then
340
341
fi
341
342
342
343
# Configure nfs
343
- # if [ -f "/etc/default/nfs-kernel-server" ]; then
344
- # sed -i 's/.*RPCMOUNTDOPTS.*/RPCMOUNTDOPTS="--port 892"/' /etc/default/nfs-kernel-server
345
- # touch /etc/modprobe.d/lockd.conf
346
- # sed -i '/^lockd/d' /etc/modules
347
- # echo "lockd" >> /etc/modules
348
- # fi
349
- # if [ -f "/etc/sysconfig/nfs" ]; then
350
- # if grep -q LOCKD_TCPPORT /etc/sysconfig/nfs; then
351
- # sed -i 's/.*LOCKD_TCPPORT.*/LOCKD_TCPPORT=32803/' /etc/sysconfig/nfs
352
- # sed -i 's/.*LOCKD_UDPPORT.*/LOCKD_UDPPORT=32769/' /etc/sysconfig/nfs
353
- # sed -i 's/.*MOUNTD_PORT.*/MOUNTD_PORT=892/' /etc/sysconfig/nfs
354
- # else
355
- # sed -i 's/.*RPCMOUNTDOPTS.*/RPCMOUNTDOPTS="-p 892"/' /etc/sysconfig/nfs
356
- # fi
357
- # fi
358
- # if [ -f "/etc/modprobe.d/lockd.conf" ]; then
359
- # if ! grep -q nlm_tcpport /etc/modprobe.d/lockd.conf; then
360
- # echo "options lockd nlm_tcpport=32803" >> /etc/modprobe.d/lockd.conf
361
- # fi
362
- # sed -i 's/.*nlm_tcpport.*/options lockd nlm_tcpport=32803/' /etc/modprobe.d/lockd.conf
363
- # if ! grep -q nlm_udpport /etc/modprobe.d/lockd.conf; then
364
- # echo "options lockd nlm_udpport=32769" >> /etc/modprobe.d/lockd.conf
365
- # fi
366
- # sed -i 's/.*nlm_udpport.*/options lockd nlm_udpport=32769/' /etc/modprobe.d/lockd.conf
367
- # fi
368
- # sed -i "/NetBootSP0/d" /etc/exports
369
- # echo "/srv/NetBoot/NetBootSP0 *(ro,no_subtree_check,no_root_squash,insecure)" >> "/etc/exports"
370
- # exportfs -a
344
+ if [ -f " /etc/default/nfs-kernel-server" ]; then
345
+ sed -i ' s/.*RPCMOUNTDOPTS.*/RPCMOUNTDOPTS="--port 892"/' /etc/default/nfs-kernel-server
346
+ touch /etc/modprobe.d/lockd.conf
347
+ sed -i ' /^lockd/d' /etc/modules
348
+ echo " lockd" >> /etc/modules
349
+ fi
350
+ if [ -f " /etc/sysconfig/nfs" ]; then
351
+ if grep -q LOCKD_TCPPORT /etc/sysconfig/nfs; then
352
+ sed -i ' s/.*LOCKD_TCPPORT.*/LOCKD_TCPPORT=32803/' /etc/sysconfig/nfs
353
+ sed -i ' s/.*LOCKD_UDPPORT.*/LOCKD_UDPPORT=32769/' /etc/sysconfig/nfs
354
+ sed -i ' s/.*MOUNTD_PORT.*/MOUNTD_PORT=892/' /etc/sysconfig/nfs
355
+ else
356
+ sed -i ' s/.*RPCMOUNTDOPTS.*/RPCMOUNTDOPTS="-p 892"/' /etc/sysconfig/nfs
357
+ fi
358
+ fi
359
+ if [ -f " /etc/modprobe.d/lockd.conf" ]; then
360
+ if ! grep -q nlm_tcpport /etc/modprobe.d/lockd.conf; then
361
+ echo " options lockd nlm_tcpport=32803" >> /etc/modprobe.d/lockd.conf
362
+ fi
363
+ sed -i ' s/.*nlm_tcpport.*/options lockd nlm_tcpport=32803/' /etc/modprobe.d/lockd.conf
364
+ if ! grep -q nlm_udpport /etc/modprobe.d/lockd.conf; then
365
+ echo " options lockd nlm_udpport=32769" >> /etc/modprobe.d/lockd.conf
366
+ fi
367
+ sed -i ' s/.*nlm_udpport.*/options lockd nlm_udpport=32769/' /etc/modprobe.d/lockd.conf
368
+ fi
369
+ sed -i " /NetBootSP0/d" /etc/exports
370
+ echo " /srv/NetBoot/NetBootSP0 *(ro,no_subtree_check,no_root_squash,insecure)" >> " /etc/exports"
371
+ exportfs -a
371
372
372
373
# Configure samba
373
374
# Change SMB setting for guest access
0 commit comments