--- iptables.init.orig 2003-05-27 15:32:01.000000000 -0700 +++ iptables.init 2003-05-27 15:47:59.000000000 -0700 @@ -4,7 +4,7 @@ # later # $Header: /home/cvsroot/gentoo-x86/net-firewall/iptables/files/iptables.init,v 1.2 2003/05/04 18:19:03 aliz Exp $ -opts="start stop save" +opts="start stop reload save" depend() { need logger net @@ -41,28 +41,39 @@ fi for a in `cat /proc/net/ip_tables_names`; do - iptables -F -t $a - iptables -X -t $a + /sbin/iptables -F -t $a + /sbin/iptables -X -t $a if [ $a == nat ]; then - iptables -t nat -P PREROUTING ACCEPT - iptables -t nat -P POSTROUTING ACCEPT - iptables -t nat -P OUTPUT ACCEPT + /sbin/iptables -t nat -P PREROUTING ACCEPT + /sbin/iptables -t nat -P POSTROUTING ACCEPT + /sbin/iptables -t nat -P OUTPUT ACCEPT elif [ $a == mangle ]; then - iptables -t mangle -P PREROUTING ACCEPT - iptables -t mangle -P INPUT ACCEPT - iptables -t mangle -P FORWARD ACCEPT - iptables -t mangle -P OUTPUT ACCEPT - iptables -t mangle -P POSTROUTING ACCEPT + /sbin/iptables -t mangle -P PREROUTING ACCEPT + /sbin/iptables -t mangle -P INPUT ACCEPT + /sbin/iptables -t mangle -P FORWARD ACCEPT + /sbin/iptables -t mangle -P OUTPUT ACCEPT + /sbin/iptables -t mangle -P POSTROUTING ACCEPT elif [ $a == filter ]; then - iptables -t filter -P INPUT ACCEPT - iptables -t filter -P FORWARD ACCEPT - iptables -t filter -P OUTPUT ACCEPT + /sbin/iptables -t filter -P INPUT ACCEPT + /sbin/iptables -t filter -P FORWARD ACCEPT + /sbin/iptables -t filter -P OUTPUT ACCEPT fi done eend $? } +reload() { + ebegin "Flushing firewall" + for a in `cat /proc/net/ip_tables_names`; do + /sbin/iptables -F -t $a + /sbin/iptables -X -t $a + done; + eend $? + + start +} + save() { ebegin "Saving iptables state" /sbin/iptables-save ${SAVE_RESTORE_OPTIONS} > ${IPTABLES_SAVE}