From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Fri, 11 Feb 2022 20:26:31 +0000 (+0100)
Subject: rules.pl: Add tiny ipset_restore function.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=273158d726383293b4dba4ce95cd6e1f92e90c7d;p=people%2Fstevee%2Fipfire-2.x.git

rules.pl: Add tiny ipset_restore function.

This helper function is used to load a previously exported list of
networks for a given country code into the ipset module, so it can be
used for any kind of firewall rules.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl
index da01b87750..5b1153b08a 100644
--- a/config/firewall/rules.pl
+++ b/config/firewall/rules.pl
@@ -888,3 +888,10 @@ sub firewall_is_in_subnet {
 
 	return 0;
 }
+
+sub ipset_restore ($) {
+	my ($ccode) = @_;
+
+	# Run ipset and restore the list of the given country code.
+	run("$IPSET restore < $Location::Functions::ipset_db_directory/$ccode.ipset4");
+}