Re: Questions for adding code

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1475 bytes --]

On Tue, 2012-10-16 at 07:57 +0200, Alexander Marx wrote:
> As i only know ipcop, i hope you can help me here.
> I am thinking of developing some extracode for being able to
> configure 
> vpn-Firewall rules via WUI.
> 
> I don't know how to start.

Well, let's see then. You won't need a build environment in the first
place. Just set up a virtual machine and add your changes. If you got it
all working, we will bother to get things into the source tree.

> I just want to create a cgi, that is similar to the outgoing firewall
> with the exception that this
> configures the CUSTOMFORWARD Chain.

Go to /srv/web/ipfire/cgi-bin and copy a CGI script that is very similar
to what you want to do. For example the outgoing firewall script.

Then edit it until it does what you want it to do.

> The gui should create a txt file with the rules.... 

For example that. Create a basic configuration file and just build the
CGI that edits this configuration file.

When you are done, start with the script that actually adds firewall
rules.

> 
> I need to know:
> 
> 1) Where should i beginn to make ipfire read the rules on boot?!

The firewall is initialized in /etc/init.d/firewall.

> 2) How do i implement the code in the checked-out git repository
> local?

CGI scripts go to html/cgi-bin/. All necessary configuration files have
to be created in lfs/cfgroot.
But again, first get this stuff working. We will see how to merge those
files when it is time for that.

Michael