From 095adb09cd38804d635419303376376fd3d9677e Mon Sep 17 00:00:00 2001 From: konsthol Date: Thu, 7 Sep 2023 08:03:42 +0300 Subject: [PATCH] Version control is awful --- harden | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/harden b/harden index aa56ee4..abfd15a 100755 --- a/harden +++ b/harden @@ -588,7 +588,10 @@ if [[ -n "$OLD_PORTS" ]]; then # Deny the port in the firewall case "$currentFirewall" in ufw) - sudo ufw deny "$port"/tcp + PORT_RULE_NUMS="$(sudo ufw status numbered | grep -i "$port" | grep -oP '\[.*?\]' | grep -o '[0-9]')" + for PORT_RULE_NUM in ${PORT_RULE_NUMS[@]}; do + yes | sudo ufw delete "$PORT_RULE_NUM" + done ;; firewalld) sudo firewall-cmd --permanent --remove-port="$port"/tcp