1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61
|
#!/bin/sh
set -e
# Can be dropped in Trixie
if update-alternatives --query iptables.service 2>/dev/null; then
update-alternatives --remove-all iptables.service
fi
# Source debconf library
. /usr/share/debconf/confmodule
case "$1" in
configure)
db_get iptables-persistent/autosave_done || true
if [ "x$RET" != "xtrue" ]; then
db_get iptables-persistent/autosave_v4 || true
if [ "x$RET" = "xtrue" ]; then
if which iptables >/dev/null; then
if iptables -t filter -L -n >/dev/null; then
iptables-save >/etc/iptables/rules.v4
else
echo "IPv4: Unable to save (table filter isn't available or module not loadable)"
fi
else
echo "IPv4: Can't find iptables in $PATH, please check your system"
fi
fi
db_get iptables-persistent/autosave_v6 || true
if [ "x$RET" = "xtrue" ]; then
if which ip6tables >/dev/null; then
if ip6tables -t filter -L -n >/dev/null; then
ip6tables-save >/etc/iptables/rules.v6
else
echo "IPv6: Unable to save (table filter isn't available or module not loadable)"
fi
else
echo "IPv6: Can't find ip6tables in $PATH, please check your system"
fi
fi
db_set iptables-persistent/autosave_done true || true
fi
update-rc.d iptables-persistent remove
;;
esac
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ]; then
# Ensure the drop-in is loaded
if [ -d /run/systemd/system ]; then
systemctl --system daemon-reload >/dev/null || true
fi
fi
# See #1036785
if [ -f /etc/systemd/system/netfilter-persistent.service.d ]; then
rmdir --ignore-fail-on-non-empty /etc/systemd/system/netfilter-persistent.service.d
fi
#DEBHELPER#
|