diff options
| author | Dirk Brenken <dev@brenken.org> | 2021-04-23 15:03:53 +0200 |
|---|---|---|
| committer | Dirk Brenken <dev@brenken.org> | 2021-04-23 15:03:53 +0200 |
| commit | 7cfb0f4657dea6a7844df28268e7e8af6eb00db4 (patch) | |
| tree | 744b4b60d5caf6fef8156251b0d37d459654eb8b /net/banip/files | |
| parent | 2f498b68b68a06fecd030f4cac20141ab2384178 (diff) | |
banip: fix housekeeping
* fix whitelist housekeeping if you switch between normal- and
'whitelist only' mode
Signed-off-by: Dirk Brenken <dev@brenken.org>
Diffstat (limited to 'net/banip/files')
| -rwxr-xr-x | net/banip/files/banip.sh | 14 |
1 files changed, 6 insertions, 8 deletions
diff --git a/net/banip/files/banip.sh b/net/banip/files/banip.sh index ed808529d..816f2c348 100755 --- a/net/banip/files/banip.sh +++ b/net/banip/files/banip.sh @@ -548,14 +548,12 @@ f_iptables() f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set --match-set ${src_name} src -j RETURN" elif [ "${src_name%_*}" = "whitelist" ] then - if [ "${ban_whitelistonly}" = "1" ] - then - f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set ! --match-set ${src_name} src -j ${ban_logtarget_src}" - f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set ! --match-set ${src_name} dst -j ${ban_logtarget_dst}" - else - f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set --match-set ${src_name} src -j RETURN" - f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set --match-set ${src_name} dst -j RETURN" - fi + f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set ! --match-set ${src_name} src -j ${ban_logtarget_src}" + f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set ! --match-set ${src_name} dst -j ${ban_logtarget_dst}" + f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set ! --match-set ${src_name} src -j ${ban_logchain_src}" + f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set ! --match-set ${src_name} dst -j ${ban_logchain_dst}" + f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set --match-set ${src_name} src -j RETURN" + f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set --match-set ${src_name} dst -j RETURN" else f_iptrule "-D" "${ban_chain}" "-i ${dev} -m set --match-set ${src_name} src -j ${ban_logtarget_src}" f_iptrule "-D" "${ban_chain}" "-o ${dev} -m set --match-set ${src_name} dst -j ${ban_logtarget_dst}" |