27 lines
1.4 KiB
MySQL
27 lines
1.4 KiB
MySQL
|
-- trifid-api, an open source reimplementation of the Defined Networking nebula management server.
|
||
|
|
-- Copyright (C) 2023 c0repwn3r
|
||
|
|
--
|
||
|
|
-- This program is free software: you can redistribute it and/or modify
|
||
|
|
-- it under the terms of the GNU General Public License as published by
|
||
|
|
-- the Free Software Foundation, either version 3 of the License, or
|
||
|
|
-- (at your option) any later version.
|
||
|
|
--
|
||
|
|
-- This program is distributed in the hope that it will be useful,
|
||
|
|
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
-- GNU General Public License for more details.
|
||
|
|
--
|
||
|
|
-- You should have received a copy of the GNU General Public License
|
||
|
|
-- along with this program. If not, see <https:--www.gnu.org/licenses/>.
|
||
|
|
|
||
|
|
CREATE TABLE roles_firewall_rules (
|
||
|
|
id SERIAL NOT NULL PRIMARY KEY,
|
||
|
|
role SERIAL NOT NULL REFERENCES roles(id),
|
||
|
|
protocol INTEGER NOT NULL, -- 0: any 1: tcp 2: udp 3: icmp
|
||
|
|
port_range_start INTEGER NOT NULL, -- min: 1 max: 65535. Ignored if protocol==3
|
||
|
|
port_range_end INTEGER NOT NULL, -- min: 1 max: 65535, must be greater than or equal to port_range_start. Ignored if protocol==3
|
||
|
|
allow_from INTEGER NOT NULL, -- Allow traffic goverened by above rules from who?
|
||
|
|
-- -1: anybody
|
||
|
|
-- (a role, anything else): only that role
|
||
|
|
description VARCHAR(4096) NOT NULL
|
||
|
|
);
|