ufw-rule-parser 0.1.0

parser for a ufw-like firewall rule, including internal/external address keywords.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use anyhow::Result;

use ufw_rule_parser::{
    Action, Address, AddressRule, Direction, FirewallRule, Protocol, ServiceRule, parse_rules,
};

#[test]
fn parses_file_into_structured_rules() -> Result<()> {
    let input = r#"
# comment before service rule
allow ssh

# address rule with all optional fields
allow in on eth0 from internal to external port 443 proto tcp

# minimal addr rule
deny out to 8.8.8.8 port 53 proto udp
"#;

    let rules = parse_rules(input)?;

    assert_eq!(
        rules,
        vec![
            FirewallRule::Service(ServiceRule {
                action: Action::Allow,
                service: "ssh".into(),
            }),
            FirewallRule::Address(AddressRule {
                action: Action::Allow,
                direction: Some(Direction::In),
                interface: Some("eth0".into()),
                from: Some(Address::Internal),
                to: Some(Address::External),
                port: Some(443),
                proto: Some(Protocol::Tcp),
            }),
            FirewallRule::Address(AddressRule {
                action: Action::Deny,
                direction: Some(Direction::Out),
                interface: None,
                from: None,
                to: Some(Address::IpCidr("8.8.8.8".into())),
                port: Some(53),
                proto: Some(Protocol::Udp),
            }),
        ]
    );

    Ok(())
}