#!/sbin/runscript # Copyright 1999-2015 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Id$ description='The Shoreline Firewall 6, more commonly known as "Shorewall6", is' description="${description} a high-level tool for configuring Netfilter." extra_commands="check clear" extra_started_commands="refresh reset" description_check="Checks if the configuration will compile or not." description_clear="Clear will remove all rules and chains installed by" description_clear="${description_clear} Shorewall6. The firewall is then" description_clear="${description_clear} wide open and unprotected." description_refresh="The mangle table will be refreshed along with the" description_refresh="${description_refresh} blacklist chain (if any)." description_reset="All the packet and byte counters in the firewall are reset." command="/usr/sbin/shorewall6" depend() { provide firewall after ulogd } status() { local _retval ${command} status 1>/dev/null _retval=$? if [ ${_retval} = '0' ]; then einfo 'status: started' mark_service_started "${SVCNAME}" return 0 else einfo 'status: stopped' mark_service_stopped "${SVCNAME}" return 3 fi } start() { ebegin "Starting shorewall6" ${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null eend $? } stop() { ebegin "Stopping shorewall6" ${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null eend $? } restart() { # shorewall comes with its own control script that includes a # restart function, so refrain from calling svc_stop/svc_start # here. Note that this comment is required to fix bug 55576; # runscript.sh greps this script... (09 Jul 2004 agriffis) ebegin "Restarting shorewall6" ${command} status 1>/dev/null if [ $? != 0 ] ; then svc_start else ${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null fi eend $? } clear() { # clear will remove all the rules and bring the system to an unfirewalled # state. (21 Nov 2004 eldad) ebegin "Clearing all shorewall rules and setting policy to ACCEPT" ${command} ${OPTIONS} clear 1>/dev/null eend $? } reset() { # reset the packet and byte counters in the firewall ebegin "Resetting the packet and byte counters in shorewall6" ${command} ${OPTIONS} reset 1>/dev/null eend $? } refresh() { # refresh the rules involving the broadcast addresses of firewall # interfaces, the black list, traffic control rules and # ECN control rules ebegin "Refreshing shorewall6 rules" ${command} ${OPTIONS} refresh 1>/dev/null eend $? } check() { # perform cursory validation of the zones, interfaces, hosts, rules # and policy files. CAUTION: does not parse and validate the generated # iptables commands. ebegin "Checking shorewall6 configuration" ${command} ${OPTIONS} check 1>/dev/null eend $? }