webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-11 19:55:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

initscripts/suricata: Move functions order and always use flush_fw_chain function

Browse Source 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Stefan Schantl
2019-04-25 19:31:47 +02:00
committed by Arne Fitzenreiter
parent 686c4b9f25
commit 5e3067cb52
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/initscripts/system/suricata
View File

@@ -48,12 +48,18 @@ function get_cpu_count {
echo $CPUCOUNT
}
# Function to flush the firewall chain.
function flush_fw_chain {
# Call iptables and flush the chain
iptables -F "$FW_CHAIN"
}
# Function to create the firewall rules to pass the traffic to suricata.
function generate_fw_rules {
cpu_count=$(get_cpu_count)
# Flush the firewall chain.
iptables -F "$FW_CHAIN"
flush_fw_chain
# Loop through the array of network zones.
for zone in "${network_zones[@]}"; do
@@ -103,12 +109,6 @@ function generate_fw_rules {
iptables -A "${FW_CHAIN}" -j MARK --set-xmark "0x0/${MASK}"
}
# Function to flush the firewall chain.
function flush_fw_chain {
# Call iptables and flush the chain
iptables -F "$FW_CHAIN"
}
case "$1" in
start)
# Get amount of CPU cores.