28 lines
967 B
Plaintext
28 lines
967 B
Plaintext
FIREWALL_INCLUDE="/usr/share/xray/firewall_include.lua"
|
|
|
|
setup_firewall() {
|
|
logger -st xray[$$] -p4 "Setting ipset rules..."
|
|
lua /usr/share/xray/gen_ipset_rules.lua | ipset -! restore
|
|
/etc/hotplug.d/iface/01-transparent-proxy-ipset
|
|
|
|
logger -st xray[$$] -p4 "Generating firewall rules..."
|
|
/usr/bin/lua ${FIREWALL_INCLUDE} enable > $(uci get firewall.xray.path)
|
|
|
|
logger -st xray[$$] -p4 "Triggering firewall restart..."
|
|
/etc/init.d/firewall restart > /dev/null 2>&1
|
|
}
|
|
|
|
flush_firewall() {
|
|
logger -st xray[$$] -p4 "Flushing firewall rules..."
|
|
/usr/bin/lua ${FIREWALL_INCLUDE} flush > $(uci get firewall.xray.path)
|
|
|
|
logger -st xray[$$] -p4 "Triggering firewall restart..."
|
|
/etc/init.d/firewall restart > /dev/null 2>&1
|
|
|
|
logger -st xray[$$] -p4 "Flushing ipset rules..."
|
|
for setname in $(ipset -n list | grep "tp_spec"); do
|
|
ipset -! destroy $setname
|
|
done
|
|
/etc/hotplug.d/iface/01-transparent-proxy-ipset
|
|
}
|