#!/bin/sh

PATH="/sbin:/bin:/usr/sbin:/usr/bin"

IPtables_dumpfile='/etc/iptables/rules'
IP6tables_dumpfile='/etc/iptables/rules6'

# Include config file for iptables-persistent
. /etc/iptables/iptables.conf

case "$1" in
start)
    if [ -e /var/run/iptables ]; then
        echo "iptables is already started!"
        exit 1
    else
        touch /var/run/iptables
    fi

    modprobe tcp-$CONGESTION
    sysctl net.ipv4.tcp_congestion_control=$CONGESTION

    if [ $ENABLE_FORWARDING -ne 0 ]; then
        # Enable Routing
        echo 1 > /proc/sys/net/ipv4/ip_forward
        echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
    fi

    # Load Modules
    modprobe -a $MODULES

    # Load saved rules
    if [ -f $IPtables_dumpfile ]; then
        iptables-restore <$IPtables_dumpfile
    fi

    if [ -f $IP6tables_dumpfile ]; then
        ip6tables-restore <$IP6tables_dumpfile
    fi

    ;;

stop|force-stop)
    if [ ! -e /var/run/iptables ]; then
        echo "iptables is already stopped!"
        exit 1
    else
        rm /var/run/iptables
    fi

    if [ $SAVE_NEW_RULES -ne 0 ]; then
        # Backup old rules
        cp $IPtables_dumpfile $IPtables_dumpfile.bak
        cp $IP6tables_dumpfile $IP6tables_dumpfile.bak
        iptables -t nat -F upnp
        iptables -t filter -F upnp
        # Save new rules
        iptables-save >$IPtables_dumpfile
        ip6tables-save >$IP6tables_dumpfile
    fi

    # Restore Default Policies
    iptables -P INPUT ACCEPT
    iptables -P FORWARD ACCEPT
    iptables -P OUTPUT ACCEPT

    # Flush rules on default tables
    iptables -F
    iptables -t nat -F
    iptables -t mangle -F

    # Unload previously loaded modules
    modprobe -r $MODULES

    # Disable Routing if enabled
    if [ $ENABLE_FORWARDING -ne 0 ]; then
        # Disable Routing
        echo 0 > /proc/sys/net/ipv4/ip_forward
        echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
    fi

    ;;
restart|force-reload)
    $0 stop
    $0 start
    ;;
status)
    echo "Filter Rules:"
    echo "--------------"
    iptables -L -v
    echo ""
    echo "NAT Rules:"
    echo "-------------"
    iptables -t nat -L -v
    echo ""
    echo "Mangle Rules:"
    echo "----------------"
    iptables -t mangle -L -v
    ;;
*)
    echo "Usage: $0 {start|stop|force-stop|restart|force-reload|status}" >&2
    exit 1
    ;;
esac

exit 0

# A basic config file for the /etc/init.d/iptable-persistent script
#

# Should new manually added rules from command line be saved on reboot? Assign to a value different that 0 if you want this enabled.
SAVE_NEW_RULES=0

# Modules to load:
MODULES="nf_nat_ftp nf_conntrack_ftp nf_nat_irc nf_conntrack_irc"

# Enable Routing?
ENABLE_FORWARDING=1

# Advanced Congestion Control
CONGESTION=yeah