initscripts/suricata: Move functions order and always use flush_fw_chain function
authorStefan Schantl <stefan.schantl@ipfire.org>
Thu, 25 Apr 2019 17:31:47 +0000 (19:31 +0200)
committerArne Fitzenreiter <arne_f@ipfire.org>
Fri, 26 Apr 2019 05:46:15 +0000 (07:46 +0200)
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
src/initscripts/system/suricata

index ecd6930..233cded 100644 (file)
@@ -48,12 +48,18 @@ function get_cpu_count {
        echo $CPUCOUNT
 }
 
+# Function to flush the firewall chain.
+function flush_fw_chain {
+       # Call iptables and flush the chain
+       iptables -F "$FW_CHAIN"
+}
+
 # Function to create the firewall rules to pass the traffic to suricata.
 function generate_fw_rules {
        cpu_count=$(get_cpu_count)
 
        # Flush the firewall chain.
-       iptables -F "$FW_CHAIN"
+       flush_fw_chain
 
        # Loop through the array of network zones.
        for zone in "${network_zones[@]}"; do
@@ -103,12 +109,6 @@ function generate_fw_rules {
        iptables -A "${FW_CHAIN}" -j MARK --set-xmark "0x0/${MASK}"
 }
 
-# Function to flush the firewall chain.
-function flush_fw_chain {
-       # Call iptables and flush the chain
-       iptables -F "$FW_CHAIN"
-}
-
 case "$1" in
         start)
                # Get amount of CPU cores.