File: iptables-persistent.postinst

package info (click to toggle)
iptables-persistent 1.0.15
  • links: PTS, VCS
  • area: main
  • in suites: bullseye
  • size: 252 kB
  • sloc: sh: 358; makefile: 17
file content (48 lines) | stat: -rw-r--r-- 1,532 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
#!/bin/sh

set -e

# Setup alternatives
update-alternatives --install /lib/systemd/system/iptables.service iptables.service /lib/systemd/system/netfilter-persistent.service 40 \
    --slave /lib/systemd/system/ip6tables.service ip6tables.service /lib/systemd/system/netfilter-persistent.service

# Source debconf library
. /usr/share/debconf/confmodule

case "$1" in
configure)
    db_get iptables-persistent/autosave_done || true
    if [ "x$RET" != "xtrue" ]; then
        db_get iptables-persistent/autosave_v4 || true
        if [ "x$RET" = "xtrue" ]; then
	    if which iptables > /dev/null ; then
		if iptables -t filter -L -n > /dev/null; then
		    iptables-save > /etc/iptables/rules.v4
		else
                    echo "IPv4: Unable to save (table filter isn't available or module not loadable)"
		fi
	    else
                echo "IPv4: Can't find iptables in $PATH, please check your system"
            fi
        fi
        db_get iptables-persistent/autosave_v6 || true
        if [ "x$RET" = "xtrue" ]; then
	    if which ip6tables > /dev/null ; then
		if ip6tables -t filter -L -n > /dev/null; then
		    ip6tables-save > /etc/iptables/rules.v6
		else
                    echo "IPv6: Unable to save (table filter isn't available or module not loadable)"
		fi
	    else
                echo "IPv6: Can't find ip6tables in $PATH, please check your system"
            fi
        fi

        db_set iptables-persistent/autosave_done true || true
    fi

    update-rc.d iptables-persistent remove
;;
esac

#DEBHELPER#