#! /bin/sh

#
#    This file should be  placed in /etc/init.d.
#
#
#

set -e

PATH=/sbin:/bin:/usr/sbin:/usr/bin
DESC="Use this script to start /etc/rc.firewall script"

if [ ! -f /etc/rc.firewall ]; then
  echo "Unable to start iptables firewall - /etc/rc.firewall does not exist"
  exit 1
fi
if [ ! -f /sbin/iptables ]; then
  echo "Cannot find  /sbin/iptables"
  exit 1
fi

case "$1" in
  restart|reload)
        echo "Restarting iptables firewall..."
        $0 stop
        /bin/bash /etc/rc.firewall
        ;;
  start)
        echo  "Setting up iptables firewall..."
        /bin/bash /etc/rc.firewall
        ;;
  stop)
        echo -n "Stopping iptables firewall..."
        iptables -P OUTPUT ACCEPT
        iptables -P INPUT ACCEPT
        iptables -P FORWARD ACCEPT
        iptables -F
        iptables -X
        echo "done."
        exit 0;
        ;;
  panic)
        echo -n "Closing all ports..."
        iptables -P OUTPUT DROP
        iptables -P INPUT DROP
        iptables -P FORWARD DROP
        iptables -F
        iptables -X
        echo "done."
        exit 0;
        ;;
  *)
        echo "Usage: $0  {start|stop|restart|reload|panic}" >&2
        exit 1
        ;;
esac

exit 0