007a2bd0231a001c16aa910154edf6b1

基于linux操作系统

package deng;

import java.io.*;
import java.util.ArrayList;

import javax.swing.JOptionPane;

public class FilesIO {
	
	static int i=0;
	
	public static void writeRuleToScript(Rule rule,PrintWriter pw){
		
		String strRule="";
		String[] direction=rule.getDirection();
		
		for(int i=0;i<direction.length;i++){
			if(direction[i]!=null)
			{  
				strRule="iptables -A  "+direction[i]+" -p "+rule.getProtocol()+" -s "+rule.getIP()+" -d "+rule.getDip()
				  +" --sport "+rule.getSport()+" --dport "+rule.getDport()+" -j "+rule.getStrategy();
				pw.println(strRule);
			}
		}
	}
	
	public static boolean writeAllRulesToScript(MyArrayList ruleList){
		//File file=new File("\\etc\\rc.d\\filter-firewall");
		File file=new File("E:\\FireWall");
		FileOutputStream fos=null;
		PrintWriter pw=null;
		boolean flag=false;
		if(file.exists()){
		try {
			file=new File("E:\\FireWall\\RuleScript.txt");
			fos=new FileOutputStream(file);
			pw=new PrintWriter(fos);
			writeIniRuleToScript(pw);
			for(int i=0;i<ruleList.size();i++){
				Rule rule=(Rule)ruleList.get(i);
				   writeRuleToScript(rule,pw);
			  }
			flag=true;
			
		} catch (IOException e) {
			e.printStackTrace();
			 flag=false;
		    JOptionPane.showMessageDialog(null,"向脚本文件中写入时出错！" );	
		}	
		
		}else{
			
			try {
				file.mkdirs();
				file=new File("E:\\FireWall\\RuleScript.txt");
				fos=new FileOutputStream(file,true);
				pw=new PrintWriter(fos);
				writeIniRuleToScript(pw);
				for(int i=0;i<ruleList.size();i++){
					Rule rule=(Rule)ruleList.get(i);
					   writeRuleToScript(rule,pw);
				  }
				flag=true;
				
			} catch (IOException e) {
				e.printStackTrace();
				 flag=false;
			    JOptionPane.showMessageDialog(null,"向脚本文件中写入时出错！" );	
			}	
				
		}
		try{
			if(pw!=null)
			pw.close();
		}catch(Exception e){
			e.printStackTrace();
			flag=false;
			JOptionPane.showMessageDialog(null,"无法关闭资源！" );
		}
		
		return flag;
	}
	
	
	
	public static void writeIniRuleToScript(PrintWriter pw){
		String [] iniRules={"#!/bash/sh",
				            "echo \"1\" >  /proc/sys/net/ipv4/ip_forward    #缺省情况下，IP转发都处于不可用状态，将其设置为可用状态",
				            "echo \"1\" > /proc/sys/net/ipv4/ip_dynaddr     #使IP的动态分配功能可用",
				            "/sbin/depmod -a   # 整理核心支持模块之清单",
				            "/sbin/modprobe ip_tables",
				            "/sbin/modprobe ip_nat",
				            "iptables -F   # 清除所有已设定之规则，回复到不设防状态",
				            "iptables -X",
				            "iptables -Z   #将封包计数器归零。封包计数器是用来计算同一封包出现次数，是过滤阻断式攻击不可或缺的工具",
				            "iptables -t nat -F",
				            "iptables -t nat -X",
				            "iptables -P INPUT DROP    # 定义安全政策为正面表列。未符合过滤条件之封包，预设的处理方式",
				            "iptables -P OUTPUT DROP",
				            "iptables -P FORWARD DROP",
				            "iptables -t nat  -P PREROUTING DROP  #地址伪装的默认规则",
				            "iptables -t nat  -P POSTROUTING DROP",
				            "iptables -A INPUT -i eth0 -j ACCEPT  #假设ppp0是拨号连接外部的网络接口,eth0是内部接口",
				            "iptables -A OUTPUT -o ! eth0 -j ACCEPT ",
				            "iptables -A FORWARD -i  ppp0  -j ACCEPT ",
				            "iptables -A FORWARD  -o  eth0 -j ACCEPT ",
				            "iptables -A OUTPUT -o ppp0 -p tcp --dport 80 -j ACCEPT  #允许内部访问www服务",
				            "iptables -A OUTPUT -p tcp --sport 80 -j ACCEPT",
				            "iptables -A OUTPUT -o ppp0 -p tcp --dport 21 -j ACCEPT    #允许ftp下载",
				            "iptables -A OUTPUT -o ppp0 -p tcp --dport 20 -j ACCEPT",
				            "iptables -A FORWARD -i ppp0  -p tcp --dport 21 -j ACCEPT ",
				            "iptables -A FORWARD -o eth0 -p tcp --dport 21 -j ACCEPT ",
				            "# 从 WAN 进入防火墙主机的所有封包，检查是否为响应封包，若是则予以放行",
				            "iptables -A INPUT -p ALL  -m state --state ESTABLISHED,RELATED -j ACCEPT  ",
				            "# 从 WAN 要到 LAN 的封包仅放行回应封包",
				            "iptables -A FORWARD  -m state --state ESTABLISHED,RELATED -j ACCEPT  ",
				            "iptables -A INPUT  -p udp --sport 53 -j ACCEPT   #DNS端口",
				            "#更改所有来自192.168.100.0/24的数据包的源ip地址为198.199.37.3",
				            "iptables -t nat -A POSTROUTING -s 192.168.100.0/24 -o ppp0 -j SNAT --to 198.199.37.3",
				            "#更改所有来自192.168.133.0/24的数据包的源ip地址为198.199.37.3",
				            "iptables -t nat -A POSTROUTING -s 192.168.133.0/24 -o ppp0 -j SNAT --to 198.199.37.3",
				            "iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE --to-ports 1024:31000"			            
				           
				            //"iptables -t nat -A POSTROUTING -p tcp -o eth0 -j SNAT --to 192.168.10.5-192.168.10.100:1024-32000",
				            
				           };
		for(int i=0;i<iniRules.length;i++){
			pw.println(iniRules[i]);
		}
		
	}
	
	public static boolean saveRuleListToFile(MyArrayList ruleList){
		File file=new File("E:\\FireWall");
		FileOutputStream fos=null;
		ObjectOutputStream oos=null;
		boolean flag=true;
		if(file.exists()){
			try {
				file=new File("E:\\FireWall\\RuleList.txt");
				fos=new FileOutputStream(file);
				oos=new ObjectOutputStream(fos);
				oos.writeObject(ruleList);
				i++;//记录保存的次数
			} catch (Exception e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
				flag=false;
				JOptionPane.showMessageDialog(null,"向文件中保存数据时出错！" );
			}
			
		}else{
			try {
				file.mkdirs();
				file=new File("E:\\FireWall\\RuleList.txt");
				fos=new FileOutputStream(file);
				oos=new ObjectOutputStream(fos);
				oos.writeObject(ruleList);
				i++;//记录保存的次数
			} catch (Exception e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
				flag=false;
				JOptionPane.showMessageDialog(null,"向文件中保存数据时出错！" );
			}
			
			
		}
		
		try{
		   if(oos!=null)oos.close();
		}catch(Exception ee){
			ee.printStackTrace();
			flag=false;
			JOptionPane.showMessageDialog(null,"无法关闭资源！" );
		}
		return flag;
	}
	
	
	public static MyArrayList readRuleListFromFile(String URL){
		
		File file=new File(URL);
		MyArrayList myArrayList=new MyArrayList();
		FileInputStream fis=null;
		ObjectInputStream ois=null;
		if(file.exists()){
			try {
				fis=new FileInputStream(file);
			    ois=new ObjectInputStream(fis);
				myArrayList=(MyArrayList)ois.readObject();
				
			} catch (Exception e) {
				e.printStackTrace();
				JOptionPane.showMessageDialog(null,"从文件中读取数据时出错！" );
			}
			
		}else if(i>0){	
			JOptionPane.showMessageDialog(null,"注意！找不到所需的RuleList文件，可能被删除！" );
		}
		
		try{
			if(ois!=null)ois.close();
			}catch(Exception ee){
				ee.printStackTrace();
				JOptionPane.showMessageDialog(null,"无法关闭资源！" );
			}
		return myArrayList;
	}

}