IPTABLES_TABLES="filter mangle nat"
-function iptables() {
+iptables() {
local protocol="${1}"
assert isset protocol
shift
assert_check_retval $?
}
-function iptables_chain_create() {
+iptables_chain_create() {
local protocol="${1}"
assert isset protocol
shift
}
# Calls the binary iptables command.
-function _iptables() {
+_iptables() {
local protocol="${1}"
assert isset protocol
shift
return $?
}
-function iptables_status() {
+iptables_status() {
local protocol="${1}"
assert isset protocol
return ${EXIT_OK}
}
-function iptables_rulesfile() {
+iptables_rulesfile() {
local proto=${1}
proto=${proto/ipv/}
print "${IPTABLES_TMPDIR}/${chain}${proto}"
}
-function iptables_init() {
+iptables_init() {
local protocol="${1}"
assert isset protocol
}
# Load the created ruleset into the kernel.
-function iptables_commit () {
+iptables_commit () {
local protocol="${1}"
assert isset protocol
shift
return ${EXIT_OK}
}
-function _iptables_commit_cat_rulesfile() {
+_iptables_commit_cat_rulesfile() {
local protocol="${1}"
assert isset protocol
assert [ -s "${rulesfile}" ]
}
-function _iptables_commit_load_rulesfile() {
+_iptables_commit_load_rulesfile() {
local protocol="${1}"
assert isset protocol
return ${ret}
}
-function iptables_dump() {
+iptables_dump() {
local protocol="${1}"
assert isset protocol
done < "${rulesfile}"
}
-function iptables_LOG() {
+iptables_LOG() {
local prefix="${1}"
local ret
print "${ret}"
}
-function iptables_protocol() {
+iptables_protocol() {
local PROTO
PROTO=$1
for proto in tcp udp esp ah; do
IPTABLES_MULTIPORT=1
IPTABLES_PORTRANGE=2
-function _iptables_port_range() {
+_iptables_port_range() {
grep -q ":" <<< $@
}
-function _iptables_port_multiport() {
+_iptables_port_multiport() {
grep -q "," <<< $@
}
-function _iptables_port() {
+_iptables_port() {
if _iptables_port_range "$@"; then
echo $IPTABLES_PORTRANGE
elif _iptables_port_multiport "$@"; then
fi
}
-function iptables_source_port() {
+iptables_source_port() {
[ -z "$@" ] && return
local type
type=$(_iptables_port $@)
fi
}
-function iptables_destination_port() {
+iptables_destination_port() {
[ -z "$@" ] && return
local type
type=$(_iptables_port $@)