From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 6 Apr 2023 19:31:35 +0000 (-0400)
Subject: Script to randomly block connections
X-Git-Tag: release_3_2_3~84
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb962fb0c35235d5987d99724b79c834ff11a2a0;p=thirdparty%2Ffreeradius-server.git

Script to randomly block connections
---

diff --git a/src/tests/tls/block.sh b/src/tests/tls/block.sh
new file mode 100755
index 0000000000..f397eaa19b
--- /dev/null
+++ b/src/tests/tls/block.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+#
+# Simple script blocking requests from proxy to home server
+#
+#  This works only on Linux.  It can be used to create random networking issues.
+
+if [ $UID -ne 0 ]; then
+        echo "Only 'root' can modify 'iptables' rules"
+        exit 1
+fi
+
+MAXWAIT=5
+while true; do
+        _wait="$((RANDOM % MAXWAIT))"
+
+        echo "(*) Blocking the port 2083 for ${_wait}s"
+        iptables -A INPUT -p tcp --dport 2083 -j REJECT
+        sleep $_wait
+
+        echo "(*) Allowing the port 2083 for ${_wait}s"
+        iptables -D INPUT -p tcp --dport 2083 -j REJECT
+        sleep $_wait
+done