Управление доступом на Linux-маршрутизаторе

package ru.bitel.bgbilling.modules.inet.dyn.device.linux;
 
import org.apache.log4j.Logger;
import org.jfree.util.Log;
 
import bitel.billing.common.IPUtils;
import bitel.billing.server.util.ssh.SSHSession;
import ru.bitel.bgbilling.modules.inet.access.sa.ServiceActivator;
import ru.bitel.bgbilling.modules.inet.access.sa.ServiceActivatorAdapter;
import ru.bitel.bgbilling.modules.inet.access.sa.ServiceActivatorEvent;
import ru.bitel.bgbilling.modules.inet.api.common.bean.InetDevice;
import ru.bitel.bgbilling.modules.inet.api.common.bean.InetDeviceType;
import ru.bitel.bgbilling.modules.inet.api.common.bean.InetServ;
import ru.bitel.bgbilling.server.util.Setup;
import ru.bitel.common.ParameterMap;
import ru.bitel.common.Utils;
import ru.bitel.common.inet.IpAddress;
 
public class LinuxServiceActivator
	extends ServiceActivatorAdapter
	implements ServiceActivator
{
 
	private SSHSession session = null;  
	private InetDevice inetDevice = null;
	private static final Logger logger = Logger.getLogger( LinuxServiceActivator.class ); 
 
	@Override
	public Object init( Setup setup, int moduleId, InetDevice inetDevice, InetDeviceType inetDeviceType, ParameterMap parameterMap )
		throws Exception
	{
		this.inetDevice = inetDevice;
		return null;
	}
 
	@Override
	public Object connect()
		throws Exception
	{
		String hostPort = inetDevice.getHost();
		String host = hostPort.substring( 0, hostPort.indexOf( ":" ) );
		int port = Utils.parseInt( hostPort.substring( hostPort.indexOf( ":" ) + 1 ) );
 
		session = new SSHSession( host, port, inetDevice.getUsername(), inetDevice.getPassword() );
		session.setEndString( "$" );
 
		logger.debug( "before connect" );
		String result = session.connect();
		logger.debug( "connecting: " + result );
		logger.debug( "after connect" );
		session.setEndString( ":" );
		result = session.doCommand( "sudo -i" ) ;
		logger.debug( "sudo result: " + result );
		session.setEndString( "#" );
		result = session.doCommand( inetDevice.getPassword() ) ;
		logger.debug( "passwd result: " + result );
 
 
 
 
 
 
 
		return null;
	}
 
	@Override
	public Object onAccountingStart( ServiceActivatorEvent serviceActivatorEvent )
		throws Exception
	{
		return null;
	}
 
	@Override
	public Object serviceModify( ServiceActivatorEvent serviceActivatorEvent )
		throws Exception
	{
		//11
		logger.debug( "newState= " +  serviceActivatorEvent.getNewState() );
		if ( serviceActivatorEvent.getNewState() != serviceActivatorEvent.getOldState() )
		{
			if ( serviceActivatorEvent.getNewState() ==  InetServ.STATE_DISABLE  )
			{
				logger.debug( "closing" );
				InetServ serv = serviceActivatorEvent.getNewInetServ();
				String ip = IpAddress.toString( serv.getAddressFrom() );
				String command =" iptables -t nat -I PREROUTING 1 -p tcp -m tcp -s " + ip +   
				" --dport 1:65535 -j DNAT --to-destination xxx.xxx.xxx.xxx:xxxx; iptables -t mangle -I FORWARD -p udp -s " + ip +
				" --dport 1:52  -j TTL --ttl-set 0; iptables -t mangle -I FORWARD -p udp -s " + ip +
				" --dport 54:  -j TTL --ttl-set 0";
 
				logger.debug( "command = " +  command );
 
				String result = session.doCommand( command );		
				logger.debug( "result = " + result) ;
				logger.debug( "OK" );
				return null;
			}
			else if ( serviceActivatorEvent.getNewState() ==  InetServ.STATE_ENABLE  )
			{
				logger.debug( "opening" );
				InetServ serv = serviceActivatorEvent.getNewInetServ();
				String ip = IpAddress.toString( serv.getAddressFrom() );
				String command = " iptables -t nat -D PREROUTING -p tcp -m tcp -s " + ip +   
				" --dport 1:65535 -j DNAT --to-destination xxx.xxx.xxx.xxx:xxxx; iptables -t mangle -D FORWARD -p udp -s " + ip +
				" --dport 1:52  -j TTL --ttl-set 0; iptables -t mangle -D FORWARD -p udp -s " + ip +
				" --dport 54:  -j TTL --ttl-set 0";
				logger.debug( "command = " +  command );				
				String result = session.doCommand( command );		
				logger.debug( "result = " + result) ;				
				logger.debug( "OK" );
			}
 
		}
		return null;
	}
 
	@Override
	public Object destroy()
		throws Exception
	{
		return null;
	}
 
	@Override
	public Object onAccountingStop( ServiceActivatorEvent serviceActivatorEvent1 )
		throws Exception
	{
		return null;
	}
 
 
	@Override
	public Object connectionClose( ServiceActivatorEvent serviceActivatorEvent )
		throws Exception
	{		
		return null;
	}
 
 
	@Override
	public Object serviceCreate( ServiceActivatorEvent serviceActivatorEvent1 )
		throws Exception
	{
		return null;
	}
 
 
	@Override
	public Object disconnect()
		throws Exception
	{
		//Тут желательно несколько раз вызвать session.doCommand("exit"). Количество зависит от того, сколько раз заходили и куда.  
                //При чем последний вызов(из консоли) скорее всего надо сделать doComandAsync.               
 
                session.disconnect();
                session = null;
		return null;
	}
 
	@Override
	public Object serviceCancel( ServiceActivatorEvent serviceActivatorEvent1 )
		throws Exception
	{
		return null;
	}
 
	@Override
	public Object connectionModify( ServiceActivatorEvent serviceActivatorEvent )
		throws Exception
	{
		return null;
	}
 
 
}