webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

rules.pl: Destroy all ipset lists on rule reload.

Browse Source 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
This commit is contained in:
Stefan Schantl
2022-02-14 19:42:48 +01:00
committed by Peter Müller
parent bbeb2a5067
commit 3d88688075
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/firewall/rules.pl
View File

@@ -31,6 +31,7 @@ require "${General::swroot}/location-functions.pl";
my $DEBUG = 0;
my $IPTABLES = "iptables --wait";
my $IPSET = "ipset";
# iptables chains
my $CHAIN_INPUT = "INPUTFW";
@@ -114,6 +115,9 @@ sub main {
# Flush all chains.
&flush();
# Destroy all existing ipsets.
run("$IPSET destroy");
# Prepare firewall rules.
if (! -z "${General::swroot}/firewall/input"){
&buildrules(\%configinputfw);