Opensource.Platon.SK CVS: scripts/shell/firewall/fw-off.sh - diff

   Vyššie na [Platon] / scripts / shell / firewall
Rozdiely pre scripts/shell/firewall/fw-off.sh medzi verziami 1.1 a 1.2


verzia 1.1, 2003/08/03 14:11:32
verzia 1.2, 2006/08/09 11:50:19



Riadok 11 




Riadok 11 




 # Changelog:
 # Changelog:


 # 10/01/2002 - created
 # 10/01/2002 - created


 # 02/08/2003 - import into CVS
 # 02/08/2003 - import into CVS


 
 # 09/08/2006 - enhanced by Lubomir Host 'rajo' <rajo AT platon.sk> - simplification of rules removal


 #
 #


 
 


 # $Platon$
 # $Platon: scripts/shell/firewall/fw-off.sh,v 1.1 2003/08/03 14:11:32 nepto Exp $


 
 


 IPTABLES="/sbin/iptables"
 IPTABLES="/sbin/iptables"


 
 


 function delete_chain()
 for chain in INPUT OUTPUT FORWARD; do


 {
         $IPTABLES -t filter -P $chain ACCEPT


         echo -n "$1/$2: ";
 done


         while [ -z "`$IPTABLES -t $1 -D $2 1 2>&1 `" ]; do
 


                 echo -n "#"
 for chain in PREROUTING POSTROUTING OUTPUT; do


         done
         $IPTABLES -t nat -P $chain ACCEPT


         echo " OK";
 done


 }
 


 
 for chain in PREROUTING INPUT FORWARD OUTPUT POSTROUTING; do


 $IPTABLES -t filter -P INPUT ACCEPT
         $IPTABLES -t mangle -P $chain ACCEPT


 $IPTABLES -t filter -P OUTPUT ACCEPT
 done


 $IPTABLES -t filter -P FORWARD ACCEPT
 


 
 for table in filter nat mangle; do


 delete_chain filter INPUT;
         iptables -F -t $table


 delete_chain filter OUTPUT;
         iptables -X -t $table


 delete_chain filter FORWARD;
 done


 delete_chain filter IN_FW;
 


 delete_chain filter spoofing;
 


 delete_chain filter syn-flood;
 


 
 


 $IPTABLES -X IN_FW 2> /dev/null;
 


 $IPTABLES -X spoofing 2> /dev/null;
 


 $IPTABLES -X syn-flood 2> /dev/null;
 


 
 


 $IPTABLES -t nat -P PREROUTING ACCEPT
 


 $IPTABLES -t nat -P OUTPUT ACCEPT
 


 $IPTABLES -t nat -P POSTROUTING ACCEPT
 


 
 


 delete_chain nat PREROUTING;
 


 delete_chain nat OUTPUT;
 


 delete_chain nat POSTROUTING;
 


 
 


 $IPTABLES -t mangle -P PREROUTING ACCEPT
 


 $IPTABLES -t mangle -P OUTPUT ACCEPT
 


 
 


 delete_chain mangle PREROUTING;
 


 delete_chain mangle OUTPUT;
 


 
 









Legend:


Odstranené z verzie1.1
 


zmenené riadky


 
Pridané vo verzii1.2


















Platon Group <platon@platon.sk> http://platon.sk/
  Vyššie na [Platon] / scripts / shell / firewall
-verzia 1.1, 2003/08/03 14:11:32
+verzia 1.2, 2006/08/09 11:50:19
 Riadok 11
 Riadok 11
 Riadok 11
  # Changelog:
  # 10/01/2002 - created
  # 02/08/2003 - import into CVS
+ # 09/08/2006 - enhanced by Lubomir Host 'rajo' <rajo AT platon.sk> - simplification of rules removal
  #
- # $Platon$
+ # $Platon: scripts/shell/firewall/fw-off.sh,v 1.1 2003/08/03 14:11:32 nepto Exp $
  IPTABLES="/sbin/iptables"
- function delete_chain()
+ for chain in INPUT OUTPUT FORWARD; do
- {
+         $IPTABLES -t filter -P $chain ACCEPT
-         echo -n "$1/$2: ";
+ done
-         while [ -z "`$IPTABLES -t $1 -D $2 1 2>&1 `" ]; do
-                 echo -n "#"
+ for chain in PREROUTING POSTROUTING OUTPUT; do
-         done
+         $IPTABLES -t nat -P $chain ACCEPT
-         echo " OK";
+ done
- }
+ for chain in PREROUTING INPUT FORWARD OUTPUT POSTROUTING; do
- $IPTABLES -t filter -P INPUT ACCEPT
+         $IPTABLES -t mangle -P $chain ACCEPT
- $IPTABLES -t filter -P OUTPUT ACCEPT
+ done
- $IPTABLES -t filter -P FORWARD ACCEPT
+ for table in filter nat mangle; do
- delete_chain filter INPUT;
+         iptables -F -t $table
- delete_chain filter OUTPUT;
+         iptables -X -t $table
- delete_chain filter FORWARD;
+ done
- delete_chain filter IN_FW;
- delete_chain filter spoofing;
- delete_chain filter syn-flood;
- $IPTABLES -X IN_FW 2> /dev/null;
- $IPTABLES -X spoofing 2> /dev/null;
- $IPTABLES -X syn-flood 2> /dev/null;
- $IPTABLES -t nat -P PREROUTING ACCEPT
- $IPTABLES -t nat -P OUTPUT ACCEPT
- $IPTABLES -t nat -P POSTROUTING ACCEPT
- delete_chain nat PREROUTING;
- delete_chain nat OUTPUT;
- delete_chain nat POSTROUTING;
- $IPTABLES -t mangle -P PREROUTING ACCEPT
- $IPTABLES -t mangle -P OUTPUT ACCEPT
- delete_chain mangle PREROUTING;
- delete_chain mangle OUTPUT;
 Legend:


Odstranené z verzie1.1
 


zmenené riadky


 
Pridané vo verzii1.2
 Legend:


Odstranené z verzie1.1
 


zmenené riadky


 
Pridané vo verzii1.2
-Odstranené z verzie1.1
+Pridané vo verzii1.2


Copyright © 2002-2006 Platon Group Stránka používa redakčný systém Metafox	Na začiatok