blob: 78166671602959a9f9088b551325fe5a2815d139 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
package se.leap.bitmaskclient.firewall;
/**
* Copyright (c) 2019 LEAP Encryption Access Project and contributers
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
import android.content.Context;
import de.blinkt.openvpn.core.VpnStatus;
import se.leap.bitmaskclient.tethering.TetheringObservable;
import se.leap.bitmaskclient.tethering.TetheringState;
import se.leap.bitmaskclient.utils.PreferenceHelper;
public class FirewallManager implements FirewallCallback {
public static String BITMASK_CHAIN = "bitmask_fw";
public static String BITMASK_FORWARD = "bitmask_forward";
public static String BITMASK_POSTROUTING = "bitmask_postrouting";
static final String TAG = FirewallManager.class.getSimpleName();
private Context context;
public FirewallManager(Context context) {
this.context = context;
}
@Override
public void onFirewallStarted(boolean success) {
if (success) {
VpnStatus.logInfo("[FIREWALL] Custom rules established");
} else {
VpnStatus.logError("[FIREWALL] Could not establish custom rules.");
}
}
@Override
public void onFirewallStopped(boolean success) {
if (success) {
VpnStatus.logInfo("[FIREWALL] Custom rules deleted");
} else {
VpnStatus.logError("[FIREWALL] Could not delete custom rules");
}
}
@Override
public void onTetheringConfigured(boolean success) {
if (success) {
VpnStatus.logInfo("[FIREWALL] Rules for tethering configured");
} else {
VpnStatus.logError("[FIREWALL] Could not establish rules for tethering ");
}
}
@Override
public void onSuRequested(boolean success) {
PreferenceHelper.setSuPermission(context, success);
if (!success) {
VpnStatus.logError("[FIREWALL] Root permission needed to execute custom firewall rules.");
}
}
public void start() {
startIPv6Firewall();
if (TetheringObservable.getInstance().hasAnyTetheringEnabled()) {
TetheringState deviceTethering = TetheringObservable.getInstance().getTetheringState();
TetheringState vpnTethering = new TetheringState();
vpnTethering.isWifiTetheringEnabled = deviceTethering.isWifiTetheringEnabled && PreferenceHelper.getWifiTethering(context);
vpnTethering.isUsbTetheringEnabled = deviceTethering.isUsbTetheringEnabled && PreferenceHelper.getUsbTethering(context);
vpnTethering.isBluetoothTetheringEnabled = deviceTethering.isBluetoothTetheringEnabled && PreferenceHelper.getBluetoothTethering(context);
configureTethering(vpnTethering);
}
}
public void stop() {
shutdownIPv6Firewall();
TetheringState allowedTethering = new TetheringState();
allowedTethering.isWifiTetheringEnabled = PreferenceHelper.getWifiTethering(context);
allowedTethering.isUsbTetheringEnabled = PreferenceHelper.getUsbTethering(context);
allowedTethering.isBluetoothTetheringEnabled = PreferenceHelper.getBluetoothTethering(context);
configureTethering(allowedTethering);
}
public void configureTethering(TetheringState state) {
ConfigureTetheringTask task = new ConfigureTetheringTask(this);
task.execute(state);
}
private void startIPv6Firewall() {
StartIPv6FirewallTask task = new StartIPv6FirewallTask(this);
task.execute();
}
private void shutdownIPv6Firewall() {
ShutdownIPv6FirewallTask task = new ShutdownIPv6FirewallTask(this);
task.execute();
}
}
|
