yum-proxy: fix stop command - iptables-restore do not accept -D

iptables-restore format accept only "-A" command, so remove the rules
with direct call to iptables
This commit is contained in:
Marek Marczykowski-Górecki 2014-02-21 13:28:49 +01:00
parent 98e5ffac8c
commit 18ed540158

View File

@ -1,17 +1,20 @@
#!/bin/sh
if [ "$1" == "start" ]; then
CMD="-I"
else
# Remove rules
CMD="-D"
fi
RULE_FILTER="INPUT -i vif+ -p tcp --dport 8082 -j ACCEPT"
RULE_NAT="PR-QBS-SERVICES -i vif+ -d 10.137.255.254 -p tcp --dport 8082 -j REDIRECT"
if [ "$1" == "start" ]; then
cat <<__EOF__ | iptables-restore -n
*filter
$CMD INPUT -i vif+ -p tcp --dport 8082 -j ACCEPT
-A $RULE_FILTER
COMMIT
*nat
$CMD PR-QBS-SERVICES -i vif+ -d 10.137.255.254 -p tcp --dport 8082 -j REDIRECT
-A $RULE_NAT
COMMIT
__EOF__
else
# Remove rules
iptables -D $RULE_FILTER
iptables -t nat -D $RULE_NAT
exit 0
fi