iptables.service

iptables.service (text/plain), 983 bytes, created by Evert on 2013-12-30 15:50:30 UTC

[Unit]
Description=iptables
DefaultDependencies=false
After=local-fs.target

[Service]
Type=oneshot
RemainAfterExit=yes
# Succesfull start requires /var/lib/iptables/ip*tables-start to exist
ExecStart=/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/iptables.conf
# ipv4
ExecStart=           /sbin/iptables-restore     /var/lib/iptables/iptables-start
ExecReload=          /sbin/iptables-restore     /var/lib/iptables/iptables-start
ExecStop=/bin/sh -c '/sbin/iptables-save  | tee /var/lib/iptables/iptables-start \
    | sed -nr "/^[*C]/p;s/^(:[A-Z]+ )[A-Z]+ .*/\1ACCEPT/p" | /sbin/iptables-restore'
# ipv6
ExecStart=           /sbin/ip6tables-restore    /var/lib/iptables/ip6tables-start
ExecReload=          /sbin/ip6tables-restore    /var/lib/iptables/ip6tables-start
ExecStop=/bin/sh -c '/sbin/ip6tables-save | tee /var/lib/iptables/ip6tables-start \
    | sed -nr "/^[*C]/p;s/^(:[A-Z]+ )[A-Z]+ .*/\1ACCEPT/p" | /sbin/ip6tables-restore'

[Install]
WantedBy=sysinit.target