File: iptables-persistent.postinst

package info (click to toggle)
iptables-persistent 1.0.23
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 272 kB
  • sloc: sh: 503; makefile: 20
file content (61 lines) | stat: -rw-r--r-- 1,795 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
#!/bin/sh

set -e

# Can be dropped in Trixie
if update-alternatives --query iptables.service 2>/dev/null; then
  update-alternatives --remove-all iptables.service
fi

# Source debconf library
. /usr/share/debconf/confmodule

case "$1" in
configure)
  db_get iptables-persistent/autosave_done || true
  if [ "x$RET" != "xtrue" ]; then
    db_get iptables-persistent/autosave_v4 || true
    if [ "x$RET" = "xtrue" ]; then
      if which iptables >/dev/null; then
        if iptables -t filter -L -n >/dev/null; then
          iptables-save >/etc/iptables/rules.v4
        else
          echo "IPv4: Unable to save (table filter isn't available or module not loadable)"
        fi
      else
        echo "IPv4: Can't find iptables in $PATH, please check your system"
      fi
    fi
    db_get iptables-persistent/autosave_v6 || true
    if [ "x$RET" = "xtrue" ]; then
      if which ip6tables >/dev/null; then
        if ip6tables -t filter -L -n >/dev/null; then
          ip6tables-save >/etc/iptables/rules.v6
        else
          echo "IPv6: Unable to save (table filter isn't available or module not loadable)"
        fi
      else
        echo "IPv6: Can't find ip6tables in $PATH, please check your system"
      fi
    fi

    db_set iptables-persistent/autosave_done true || true
  fi

  update-rc.d iptables-persistent remove
  ;;
esac

if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ]; then
  # Ensure the drop-in is loaded
  if [ -d /run/systemd/system ]; then
    systemctl --system daemon-reload >/dev/null || true
  fi
fi

# See #1036785
if [ -f /etc/systemd/system/netfilter-persistent.service.d ]; then
  rmdir --ignore-fail-on-non-empty /etc/systemd/system/netfilter-persistent.service.d
fi

#DEBHELPER#