Created
September 4, 2014 19:26
-
-
Save khash/54f6ffa9f572a9b3adb0 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # reset.fw - Reset firewall | |
| # set x to 0 - No reset | |
| # set x to 1 - Reset firewall | |
| # --------------------------------------------------------------------------------------------------------------- | |
| # Added support for IPV6 Firewall | |
| # --------------------------------------------------------------------------------------------------------------- | |
| # Written by Vivek Gite <[email protected]> | |
| # --------------------------------------------------------------------------------------------------------------- | |
| # You can copy / paste / redistribute this script under GPL version 2.0 or above | |
| # ============================================================= | |
| x=1 | |
| # set to true if it is CentOS / RHEL / Fedora box | |
| RHEL=false | |
| ### no need to edit below ### | |
| IPT=/sbin/iptables | |
| IPT6=/sbin/ip6tables | |
| if [ "$x" == "1" ]; | |
| then | |
| if [ "$RHEL" == "true" ]; | |
| then | |
| # reset firewall using redhat script | |
| /etc/init.d/iptables stop | |
| /etc/init.d/ip6tables stop | |
| else | |
| # for all other Linux distro use following rules to reset firewall | |
| ### reset ipv4 iptales ### | |
| $IPT -F | |
| $IPT -X | |
| $IPT -Z | |
| for table in $(</proc/net/ip_tables_names) | |
| do | |
| $IPT -t $table -F | |
| $IPT -t $table -X | |
| $IPT -t $table -Z | |
| done | |
| $IPT -P INPUT ACCEPT | |
| $IPT -P OUTPUT ACCEPT | |
| $IPT -P FORWARD ACCEPT | |
| ### reset ipv6 iptales ### | |
| $IPT6 -F | |
| $IPT6 -X | |
| $IPT6 -Z | |
| for table in $(</proc/net/ip6_tables_names) | |
| do | |
| $IPT6 -t $table -F | |
| $IPT6 -t $table -X | |
| $IPT6 -t $table -Z | |
| done | |
| $IPT6 -P INPUT ACCEPT | |
| $IPT6 -P OUTPUT ACCEPT | |
| $IPT6 -P FORWARD ACCEPT | |
| fi | |
| else | |
| : | |
| fi |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment