0caa7fcf75
Stop IP forwarding when stopping qubes-network service (which initially enables it). This makes ordering against qubes-firewall safe - firewall is applied before allowing IP forward and then is removed when IP forward is already disabled. Fixes QubesOS/qubes-issues#5599
8 lines
211 B
Bash
Executable File
8 lines
211 B
Bash
Executable File
#!/bin/sh
|
|
|
|
echo 0 > /proc/sys/net/ipv4/ip_forward
|
|
# disable also IPv6 forwarding, if IPv6 applicable
|
|
if [ -w /proc/sys/net/ipv6/conf/all/forwarding ]; then
|
|
echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
|
|
fi
|