From 5e3067cb52bdb613a193c2c0280e07d10c30f6de Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Thu, 25 Apr 2019 19:31:47 +0200 Subject: [PATCH] initscripts/suricata: Move functions order and always use flush_fw_chain function Signed-off-by: Stefan Schantl Signed-off-by: Arne Fitzenreiter --- src/initscripts/system/suricata | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata index ecd6930541..233cded538 100644 --- a/src/initscripts/system/suricata +++ b/src/initscripts/system/suricata @@ -48,12 +48,18 @@ function get_cpu_count { echo $CPUCOUNT } +# Function to flush the firewall chain. +function flush_fw_chain { + # Call iptables and flush the chain + iptables -F "$FW_CHAIN" +} + # Function to create the firewall rules to pass the traffic to suricata. function generate_fw_rules { cpu_count=$(get_cpu_count) # Flush the firewall chain. - iptables -F "$FW_CHAIN" + flush_fw_chain # Loop through the array of network zones. for zone in "${network_zones[@]}"; do @@ -103,12 +109,6 @@ function generate_fw_rules { iptables -A "${FW_CHAIN}" -j MARK --set-xmark "0x0/${MASK}" } -# Function to flush the firewall chain. -function flush_fw_chain { - # Call iptables and flush the chain - iptables -F "$FW_CHAIN" -} - case "$1" in start) # Get amount of CPU cores. -- 2.39.2