#!/usr/bin/sh ARPTABLES_CONFIG=/etc/sysconfig/arptables # compat for removed initscripts dependency success() { echo "[ OK ]" return 0 } failure() { echo "[FAILED]" return 1 } start() { if [ ! -x /usr/sbin/arptables ]; then exit 4 fi # don't do squat if we don't have the config file if [ -f $ARPTABLES_CONFIG ]; then printf "Applying arptables firewall rules: " /usr/sbin/arptables-restore < $ARPTABLES_CONFIG && \ success || \ failure touch /var/lock/subsys/arptables else failure echo "Configuration file /etc/sysconfig/arptables missing" exit 6 fi } stop() { printf "Removing user defined chains: " arptables -X && success || failure printf "Flushing all chains: " arptables -F && success || failure printf "Resetting built-in chains to the default ACCEPT policy: " arptables -P INPUT ACCEPT && \ arptables -P OUTPUT ACCEPT && \ success || \ failure rm -f /var/lock/subsys/arptables } case "$1" in start) start ;; stop) stop ;; restart|reload) # "restart" is really just "start" as this isn't a daemon, # and "start" clears any pre-defined rules anyway. # This is really only here to make those who expect it happy start ;; condrestart|try-restart|force-reload) [ -e /var/lock/subsys/arptables ] && start ;; *) exit 2 esac exit 0