SSH Command to Enable/Disable Device Filtering

Follow

Jeremy

• October 24, 2020 17:27

Is there a command line means of enabling or disabling filtering per device such as "block Internet on kid's laptop" or a way to enable social hour?

I'd like to setup ssh automation with home assistant to perform operations against firewalla based on home assistant events. 

Lets say "Home assistant has an automation for Bedtime which sets lights and disables the kid's laptop Internet access".

1

• 

  Jeremy

  • November 23, 2020 01:00

  Nothing for this one? Would have been a nice little feature to be able to tie my Home Assistant to Firewalla for triggered functionality.

  0

  Comment actions Permalink
• 

  Jeremy

  • November 24, 2020 01:20
  • Edited

  This line https://github.com/firewalla/firewalla/blob/6b09b1d9cb0a87db96dce49f6ded1a99b1ec307f/api/app-local.js#L77 doesn't load the api's if not a beta of development version.

  if i change the following line from return True to return False then the app-local will load all the routes and i can interact with the api.

  https://github.com/firewalla/firewalla/blob/6b09b1d9cb0a87db96dce49f6ded1a99b1ec307f/net2/Firewalla.js#L144 

  enabling this appears to open it for unauthenticated access as it appears to be bound to all interfaces rather than localhost only. how can i access the api in an authenticated and secure manner?

  i can use the following to get a list of all the policies
  curl http://127.0.0.1:8834/v1/policy/list

  then use the following to "pause" or "resume" the policy as identified in the app
  curl -d -H http://127.0.0.1:8834/v1/policy/<int>/disable
  curl -d -H http://127.0.0.1:8834/v1/policy/<int>/enable

  i can use the following to get the "disabled" state
  curl http://127.0.0.1:8834/v1/policy/<int>

  i can use a pubkey to ssh and execute the curl statements and create an effective means to automate enabling and disabling policies.

  0

  Comment actions Permalink
• 

  Aram

  • February 22, 2022 00:45

  Did you get anywhere with this?

  I would also like to automate configuration changes. 

  0

  Comment actions Permalink

Please sign in to leave a comment.