root / ifup-extra @ c780a7c5
History | View | Annotate | Download (872 Bytes)
1 |
#!/bin/bash |
---|---|
2 |
|
3 |
source /etc/default/snf-network |
4 |
source /usr/lib/snf-network/common.sh |
5 |
|
6 |
# Useful environment vars |
7 |
# INTERFACE, INSTANCE, IP, NETWORK_TAGS, MODE, TABLE |
8 |
|
9 |
function reset_extra (){ |
10 |
|
11 |
iptables -D FORWARD -i $INTERFACE -p tcp --dport 25 -j ACCEPT |
12 |
ip6tables -D FORWARD -i $INTERFACE -p tcp --dport 25 -j ACCEPT |
13 |
|
14 |
} |
15 |
|
16 |
# Reset rules that might have been applied by a previous ifup-extra |
17 |
try reset_extra |
18 |
|
19 |
ifprefixindex="synnefo:network:$INTERFACE_INDEX:" |
20 |
ifprefixname="synnefo:network:$INTERFACE_NAME:" |
21 |
ifprefixuuid="synnefo:network:$INTERFACE_UUID:" |
22 |
for tag in $TAGS; do |
23 |
tag=${tag#$ifprefixindex} |
24 |
tag=${tag#$ifprefixname} |
25 |
tag=${tag#$ifprefixuuid} |
26 |
case $tag in |
27 |
mail) |
28 |
# Here add iptalbes rule.. |
29 |
iptables -I FORWARD -i $INTERFACE -p tcp --dport 25 -j ACCEPT |
30 |
ip6tables -I FORWARD -i $INTERFACE -p tcp --dport 25 -j ACCEPT |
31 |
;; |
32 |
esac |
33 |
done |
34 |
|
35 |
exit 0 |
36 |
|