Search
SailfishOS Open Build Service
>
Projects
>
mer-infra:stable
>
iptables-persistent
> 25-ip6tables
Log In
Username
Password
Cancel
Overview
Repositories
Revisions
Requests
Users
Advanced
Attributes
Meta
File 25-ip6tables of Package iptables-persistent
#!/bin/sh # This file is part of netfilter-persistent # (was iptables-persistent) # Copyright (C) 2009, Simon Richter <sjr@debian.org> # Copyright (C) 2010, 2014 Jonathan Wiltshire <jmw@debian.org> # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation, either version 3 # of the License, or (at your option) any later version. set -e rc=0 load_rules() { #load IPv6 rules if [ ! -f /etc/sysconfig/iptables.v6 ]; then echo "Warning: skipping IPv6 (no rules to load)" else ip6tables-restore -w < /etc/sysconfig/iptables.v6 if [ $? -ne 0 ]; then rc=1 fi fi } save_rules() { #save IPv6 rules #need at least ip6table_filter loaded: /sbin/modprobe -q ip6table_filter if [ ! -f /proc/net/ip6_tables_names ]; then echo "Warning: skipping IPv6 (no modules loaded)" elif [ -x /usr/sbin/ip6tables-save ]; then touch /etc/sysconfig/iptables.v6 chmod 0640 /etc/sysconfig/iptables.v6 ip6tables-save > /etc/sysconfig/iptables.v6 if [ $? -ne 0 ]; then rc=1 fi fi } flush_rules() { if [ ! -f /proc/net/ip6_tables_names ]; then echo "Warning: skipping IPv6 (no module loaded)" elif [ -x /usr/sbin/ip6tables ]; then for chain in INPUT FORWARD OUTPUT do /usr/sbin/ip6tables -P $chain ACCEPT done for param in F Z X; do /usr/sbin/ip6tables -$param; done for table in $(cat /proc/net/ip6_tables_names) do /usr/sbin/ip6tables -t $table -F /usr/sbin/ip6tables -t $table -Z /usr/sbin/ip6tables -t $table -X done fi } case "$1" in start|restart|reload|force-reload) load_rules ;; save) save_rules ;; stop) # Why? because if stop is used, the firewall gets flushed for a variable # amount of time during package upgrades, leaving the machine vulnerable # It's also not always desirable to flush during purge echo "Automatic flushing disabled, use \"flush\" instead of \"stop\"" ;; flush) flush_rules ;; *) echo "Usage: $0 {start|restart|reload|force-reload|save|flush}" >&2 exit 1 ;; esac exit $rc