summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--rc.firewall/firewall/dependencies4
-rw-r--r--rc.firewall/firewall/down9
-rw-r--r--rc.firewall/firewall/type1
-rw-r--r--rc.firewall/firewall/up11
4 files changed, 25 insertions, 0 deletions
diff --git a/rc.firewall/firewall/dependencies b/rc.firewall/firewall/dependencies
new file mode 100644
index 0000000..1c288cb
--- /dev/null
+++ b/rc.firewall/firewall/dependencies
@@ -0,0 +1,4 @@
+network
+# In some cases this service might need to be started after the service
+# below dealing with IP packet forwarding
+#ip_forward
diff --git a/rc.firewall/firewall/down b/rc.firewall/firewall/down
new file mode 100644
index 0000000..28f0d83
--- /dev/null
+++ b/rc.firewall/firewall/down
@@ -0,0 +1,9 @@
+######################################################
+# Run the rc.firewall_shutdown script (if it exists) #
+######################################################
+
+if -t { [ -x /etc/rc.d/rc.firewall_shutdown ] }
+# Prepend every output with the service's name
+pipeline -w { sed -u "s/^/firewall: /" }
+fdmove -c 2 1
+nft flush ruleset
diff --git a/rc.firewall/firewall/type b/rc.firewall/firewall/type
new file mode 100644
index 0000000..bdd22a1
--- /dev/null
+++ b/rc.firewall/firewall/type
@@ -0,0 +1 @@
+oneshot
diff --git a/rc.firewall/firewall/up b/rc.firewall/firewall/up
new file mode 100644
index 0000000..2d62e8d
--- /dev/null
+++ b/rc.firewall/firewall/up
@@ -0,0 +1,11 @@
+####################################################################
+# Run the rc.firewall script #
+# #
+# See the HOWTOs on http://www.netfilter.org/ for documentation on #
+# setting up a firewall or NAT on Linux #
+####################################################################
+
+# Prepend every output with the service's name
+pipeline -w { sed -u "s/^/firewall: /" }
+fdmove -c 2 1
+nft -f /etc/nftables/conf.nft