18fd73d348
- arptables-nft-helper: Remove bashisms - ebtables-helper: Drop unused variable, add a missing quote - extensions: libxt_string: Avoid buffer size warning for strncpy() - libxtables: Introduce xtables_strdup() and use it everywhere - extensions: libebt_ip6: Use xtables_ip6parse_any() - iptables-apply: Drop unused variable - nft: Avoid buffer size warnings copying iface names - nft: Avoid memleak in error path of nft_cmd_new() - libxtables: Fix memleak in xtopt_parse_hostmask() - extensions: libebt_ip6: Drop unused variables - libxtables: Drop leftover variable in xtables_numeric_to_ip6addr() Resolves: RHBZ#1938745
74 lines
1.3 KiB
Bash
74 lines
1.3 KiB
Bash
#!/bin/sh
|
|
|
|
ARPTABLES_CONFIG=/etc/sysconfig/arptables
|
|
|
|
# compat for removed initscripts dependency
|
|
|
|
success() {
|
|
echo "[ OK ]"
|
|
return 0
|
|
}
|
|
|
|
failure() {
|
|
echo "[FAILED]"
|
|
return 1
|
|
}
|
|
|
|
start() {
|
|
if [ ! -x /usr/sbin/arptables ]; then
|
|
exit 4
|
|
fi
|
|
|
|
# don't do squat if we don't have the config file
|
|
if [ -f $ARPTABLES_CONFIG ]; then
|
|
printf "Applying arptables firewall rules: "
|
|
/usr/sbin/arptables-restore < $ARPTABLES_CONFIG && \
|
|
success || \
|
|
failure
|
|
touch /var/lock/subsys/arptables
|
|
else
|
|
failure
|
|
echo "Configuration file /etc/sysconfig/arptables missing"
|
|
exit 6
|
|
fi
|
|
}
|
|
|
|
stop() {
|
|
printf "Removing user defined chains: "
|
|
arptables -X && success || failure
|
|
printf "Flushing all chains: "
|
|
arptables -F && success || failure
|
|
printf "Resetting built-in chains to the default ACCEPT policy: "
|
|
arptables -P INPUT ACCEPT && \
|
|
arptables -P OUTPUT ACCEPT && \
|
|
success || \
|
|
failure
|
|
rm -f /var/lock/subsys/arptables
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
start
|
|
;;
|
|
|
|
stop)
|
|
stop
|
|
;;
|
|
|
|
restart|reload)
|
|
# "restart" is really just "start" as this isn't a daemon,
|
|
# and "start" clears any pre-defined rules anyway.
|
|
# This is really only here to make those who expect it happy
|
|
start
|
|
;;
|
|
|
|
condrestart|try-restart|force-reload)
|
|
[ -e /var/lock/subsys/arptables ] && start
|
|
;;
|
|
|
|
*)
|
|
exit 2
|
|
esac
|
|
|
|
exit 0
|