-

netflow/iptables.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# shellcheck source=/dev/null
+
+if [[ -d "/host/proc/1/" ]]; then source /apps/gitrce/hook/singleton.sh "$0"; fi
+
+__main() {
+	:
+
+	_owner_id=50000
+	_chain_name="OUTPUT_NETFLOW_OWNER_${_owner_id}"
+	# 创建链（如果不存在）
+	iptables -t mangle -N "${_chain_name}" 2>/dev/null
+
+	# 检查主链 OUTPUT 是否已有跳转规则
+	if ! iptables -t mangle -C OUTPUT -m owner --gid-owner "${_owner_id}" -j "${_chain_name}" 2>/dev/null; then
+		iptables -t mangle -A OUTPUT -m owner --gid-owner "${_owner_id}" -j "${_chain_name}"
+	fi
+
+	# 检查子链是否已有 RETURN
+	if ! iptables -t mangle -C "${_chain_name}" -j RETURN 2>/dev/null; then
+		iptables -t mangle -A "${_chain_name}" -j RETURN
+	fi
+}
+
+__main
+
+__help() {
+	cat >/dev/null <<-'EOF'
+
+	EOF
+}