From 6dfffd9f0f4ac8e5fce5ebe8bfc6c1203aac02a6 Mon Sep 17 00:00:00 2001
From: Thomas Gebert <thomas.gebert@iternity.com>
Date: Wed, 1 Oct 2025 10:15:40 +0200
Subject: [PATCH] Add Firewall check

---
 gp-scripts/checkup.sh | 28 +++++++++++++++++++++++++++-
 1 file changed, 27 insertions(+), 1 deletion(-)

diff --git a/gp-scripts/checkup.sh b/gp-scripts/checkup.sh
index bed7efa..cff33b6 100644
--- a/gp-scripts/checkup.sh
+++ b/gp-scripts/checkup.sh
@@ -20,17 +20,43 @@ HEADER1
 ################################################################################
 # Main Main Main
 ################################################################################
+header1 "Check Firewall
+#  Our zones used are external and nterconnecti and client and the bond devices
+#  have to be attached to one of these"
+${ANSIBLE_CMD} -b all -m shell \
+    -a 'for zone in external interconnect client; do
+          echo "### ${zone} ###"
+          echo -n "running:   "
+          firewall-cmd --zone=external --list-interfaces
+          echo -n "permanent: "
+          firewall-cmd --permanent --zone=external --list-interfaces
+          echo ""
+        done'
+
 
 header1 "Check NTP/Chrony
 # - correct address/name
 # - Reach is > 0"
+${ANSIBLE_CMD} -b all -m shell -a "timedatectl"
 ${ANSIBLE_CMD} -b all -m shell -a "chronyc sources"
 
+
 header1 "Check Mailing
 # - correct relay address/name
 # - correct sender address
 # - correct recipient address"
-${ANSIBLE_CMD} -b all -m shell -a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
+${ANSIBLE_CMD} -b all -m shell \
+    -a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
+
+
+header1 "Check Bonding"
+${ANSIBLE_CMD} -b all -m shell \
+    -a 'for bond in /proc/net/bonding/bond*; do
+           echo "### ${bond##*/} ###"
+           egrep "Bonding Mode|MII Status|Slave Interface|Permanent HW addr|port state|Churn State|Aggregator ID" ${bond}
+           echo ""
+        done'
+
 
 header1 "Do some generic tests with 
 #  fs-manager check all"