firewall_audit 0.1.0

Cross-platform firewall audit tool and library (YAML/JSON rules, CSV/HTML/JSON export)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

use crate::error::FirewallAuditError;
use crate::firewall_rule::FirewallRule;
use crate::firewall_rule::FirewallRuleProvider;
use windows_firewall::WindowsFirewallRule;

/// Windows implementation of the firewall rule provider.
#[derive(Debug)]
pub struct WindowsFirewallProvider;

impl FirewallRuleProvider for WindowsFirewallProvider {
    fn list_rules() -> Result<Vec<FirewallRule>, FirewallAuditError> {
        windows_firewall::list_rules()
            .map(|rules| rules.iter().map(FirewallRule::from).collect())
            .map_err(|e| FirewallAuditError::WindowsFirewallError(e.to_string()))
    }
}

impl From<&WindowsFirewallRule> for FirewallRule {
    fn from(rule: &WindowsFirewallRule) -> Self {
        Self {
            os: Some("windows".to_string()),
            name: rule.name().to_string(),
            direction: format!("{:?}", rule.direction()),
            enabled: rule.enabled(),
            action: format!("{:?}", rule.action()),
            description: rule.description().map(ToString::to_string),
            application_name: rule.application_name().map(ToString::to_string),
            service_name: rule.service_name().map(ToString::to_string),
            protocol: rule.protocol().map(|p| format!("{p:?}")),
            local_ports: rule.local_ports().cloned(),
            remote_ports: rule.remote_ports().cloned(),
            local_addresses: rule.local_addresses().cloned(),
            remote_addresses: rule.remote_addresses().cloned(),
            icmp_types_and_codes: rule.icmp_types_and_codes().map(ToString::to_string),
            interfaces: rule.interfaces().cloned(),
            interface_types: rule
                .interface_types()
                .map(|set| set.iter().map(|i| format!("{i:?}")).collect()),
            grouping: rule.grouping().map(ToString::to_string),
            profiles: rule.profiles().map(|p| format!("{p:?}")),
            edge_traversal: rule.edge_traversal(),
        }
    }
}