summaryrefslogtreecommitdiffstats
path: root/roles/common/files/etc/network/if-pre-up.d
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-11-26 04:09:46 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:50:53 +0200
commitfd7e94a34b7fa9151d689375d8687d3686786d9b (patch)
tree643f4918e97e68adb5d502909b0e463de6907025 /roles/common/files/etc/network/if-pre-up.d
parentb6a2e86d811f2823daa42d9d7b78dd6702821a04 (diff)
Reformulate the headers showing the license.
To be clearer, and to follow the recommendation of the FSF, we include a full header rather than a single sentence.
Diffstat (limited to 'roles/common/files/etc/network/if-pre-up.d')
-rwxr-xr-xroles/common/files/etc/network/if-pre-up.d/iptables15
1 files changed, 12 insertions, 3 deletions
diff --git a/roles/common/files/etc/network/if-pre-up.d/iptables b/roles/common/files/etc/network/if-pre-up.d/iptables
index 644211f..2b83cdc 100755
--- a/roles/common/files/etc/network/if-pre-up.d/iptables
+++ b/roles/common/files/etc/network/if-pre-up.d/iptables
@@ -1,30 +1,39 @@
#!/bin/bash
-#
+
# A pre-up hook to auto-(re)load the iptables rulesets whenever the
# network is brought up. If the action fails, an alert message is passed
# to syslogd.
+# Copyright © 2013 Guilhem Moulin <guilhem@fripost.org>
#
-# Copyright 2013 Guilhem Moulin <guilhem@fripost.org>
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
#
-# Licensed under the GNU GPL version 3 or higher.
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
set -uo pipefail
PATH=/usr/sbin:/usr/bin:/sbin:/bin
# NOTE: syslog starts after networking during the boot process, messages
# won't be logged at boot time.
log="/usr/bin/logger -st firewall"
# Ignore the loopback interface; run the script for ifup only.
[ "$IFACE" != lo -a "$MODE" = start ] || exit 0
# We support only IPv4 and IPv6.
[ "$ADDRFAM" = inet -o "$ADDRFAM" = inet6 ] || exit 0
$log -p user.info -- "Loading $ADDRFAM firewall on interface $IFACE."
case "$ADDRFAM" in
inet) iptr=/sbin/iptables-restore; rules=rules.v4;;
inet6)iptr=/sbin/ip6tables-restore; rules=rules.v6;;
esac