| [c5c522c] | 1 | #!/bin/bash |
|---|
| 2 | |
|---|
| 3 | |
|---|
| 4 | source testlib || exit 1 |
|---|
| 5 | |
|---|
| 6 | #### Zijn alle paginas uberhaubt opvraagbaar zonder errors? |
|---|
| 7 | |
|---|
| 8 | DESCRIPTION1="Basic pagina check" |
|---|
| 9 | PAGE="firewall/listfirewall.php?show=input" |
|---|
| 10 | VERIFYPOSITIVE="Firewall opnieuw starten" |
|---|
| 11 | scc_add |
|---|
| 12 | |
|---|
| 13 | DESCRIPTION1="Basic pagina check" |
|---|
| 14 | PAGE="firewall/listblocks.php" |
|---|
| 15 | VERIFYPOSITIVE="(Alle adressen|All adresses)" |
|---|
| 16 | scc_add |
|---|
| 17 | |
|---|
| 18 | DESCRIPTION1="Basic pagina check" |
|---|
| 19 | PAGE="firewall/listservices.php" |
|---|
| 20 | VERIFYPOSITIVE="(IPSEC verkeer|IPSEC traffic)" |
|---|
| 21 | scc_add |
|---|
| 22 | |
|---|
| 23 | DESCRIPTION1="Basic pagina check" |
|---|
| 24 | PAGE="firewall/listadmins.php" |
|---|
| 25 | VERIFYPOSITIVE="altijd toegang tot de webinterface" |
|---|
| 26 | scc_add |
|---|
| 27 | |
|---|
| 28 | #### Ruim oude zooi quick and dirty op |
|---|
| 29 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 30 | PAGE="firewall/editblock.php?name=testblok&del=1" |
|---|
| 31 | IGNOREERROR=1 |
|---|
| 32 | scc_add |
|---|
| 33 | |
|---|
| 34 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 35 | PAGE="firewall/editservice.php?id=1234/tcp&del=1" |
|---|
| 36 | IGNOREERROR=1 |
|---|
| 37 | scc_add |
|---|
| 38 | |
|---|
| 39 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 40 | PAGE="firewall/editfirewall.php?ruletxt=ipblock,testblok,zone_FW,,service,/icmp,deny,,&del=1" |
|---|
| 41 | IGNOREERROR=1 |
|---|
| 42 | scc_add |
|---|
| 43 | |
|---|
| 44 | #### Voeg test blokken en services toe |
|---|
| 45 | |
|---|
| 46 | DESCRIPTION1="Maak testipblok aan" |
|---|
| 47 | PAGE="firewall/editblock.php" |
|---|
| 48 | METHOD="post" |
|---|
| 49 | POSTBODY="new_name=testblok&new_startip=0.0.0.0&new_endip=255.255.255.255&save=1" |
|---|
| 50 | VERIFYPOSITIVE="testblok gewijzigd" |
|---|
| 51 | scc_add |
|---|
| 52 | |
|---|
| 53 | DESCRIPTION1="controleer testblok" |
|---|
| 54 | PAGE="firewall/listblocks.php" |
|---|
| 55 | VERIFYPOSITIVE="testblok" |
|---|
| 56 | scc_add |
|---|
| 57 | |
|---|
| 58 | DESCRIPTION1="Maak testservice aan" |
|---|
| 59 | PAGE="firewall/editservice.php" |
|---|
| 60 | METHOD="post" |
|---|
| 61 | POSTBODY="fields[port]=1234&fields[proto]=tcp&fields[desc]=testservice&save=1" |
|---|
| 62 | VERIFYPOSITIVE="Service definitie 1234/tcp gewijzigd" |
|---|
| 63 | scc_add |
|---|
| 64 | |
|---|
| 65 | |
|---|
| 66 | DESCRIPTION1="controleer testservice" |
|---|
| 67 | PAGE="firewall/listservices.php" |
|---|
| 68 | VERIFYPOSITIVE="testservice" |
|---|
| 69 | scc_add |
|---|
| 70 | |
|---|
| 71 | #Voer de set tot zo ver uit: |
|---|
| 72 | scc_test || exit 1 |
|---|
| 73 | |
|---|
| 74 | #### Test of firewall daadwerkelijk 'effect' heeft |
|---|
| 75 | |
|---|
| 76 | scc_new |
|---|
| 77 | DESCRIPTION1="Maak icmp allow regel aan" |
|---|
| 78 | PAGE="firewall/editfirewall.php" |
|---|
| 79 | METHOD="post" |
|---|
| 80 | POSTBODY="new_dstserviceandtype=service!/icmp&new_access=allow&new_dsttype=zone_FW&new_src=testblok&new_srctype=ipblock&save=1" |
|---|
| 81 | VERIFYPOSITIVE="toegevoegd" |
|---|
| 82 | scc_add |
|---|
| 83 | scc_test || exit 1 |
|---|
| 84 | |
|---|
| 85 | DESCRIPTION1="Onthoud firewall regel ID" |
|---|
| 86 | CMD="cat /etc/firewall/firewall|cut -f 3 -d' '|grep '[0-9]'|tail -1"; |
|---|
| 87 | ID=`sshtest` || exit 1 |
|---|
| 88 | |
|---|
| 89 | echo "Kunnen we server pingen?" |
|---|
| 90 | ping -w1 -c1 $IP || exit 1 |
|---|
| 91 | |
|---|
| 92 | scc_new |
|---|
| 93 | DESCRIPTION1="Verander allow in deny regel" |
|---|
| 94 | PAGE="firewall/editfirewall.php?ruletxt=$ID" |
|---|
| 95 | METHOD="post" |
|---|
| 96 | POSTBODY="new_dstserviceandtype=service!/icmp&new_access=deny&new_dsttype=zone_FW&new_src=testblok&new_srctype=ipblock&save=1" |
|---|
| 97 | VERIFYPOSITIVE="veranderd in" |
|---|
| 98 | scc_add |
|---|
| 99 | scc_test || exit 1 |
|---|
| 100 | |
|---|
| 101 | |
|---|
| 102 | echo "Server mag nu niet meer pingbaar zijn:" |
|---|
| 103 | ping -w1 -c1 $IP && exit 1 |
|---|
| 104 | |
|---|
| 105 | |
|---|
| 106 | #### Ruim oude zooi quick and dirty op |
|---|
| 107 | scc_new |
|---|
| 108 | |
|---|
| 109 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 110 | PAGE="firewall/editblock.php?name=testblok&del=1" |
|---|
| 111 | IGNOREERROR=1 |
|---|
| 112 | scc_add |
|---|
| 113 | |
|---|
| 114 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 115 | PAGE="firewall/editfirewall.php?ruletxt=$ID&del=1" |
|---|
| 116 | IGNOREERROR=1 |
|---|
| 117 | scc_add |
|---|
| 118 | |
|---|
| 119 | DESCRIPTION1="Oude zooi opruimen" |
|---|
| 120 | PAGE="firewall/editservice.php?id=1234/tcp&del=1" |
|---|
| 121 | IGNOREERROR=1 |
|---|
| 122 | scc_add |
|---|
| 123 | |
|---|
| 124 | |
|---|
| 125 | scc_test || exit 1 |
|---|
