-
This commit is contained in:
@@ -8,22 +8,23 @@ __main() {
|
|||||||
update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
|
update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
|
||||||
update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null
|
update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null
|
||||||
|
|
||||||
_owner_id=51000
|
_owner_ids=$(ps -eo gid --no-headers | sort -u)
|
||||||
_chain="output_netflow_owner_${_owner_id}"
|
_chain="output_netflow_owner_51000"
|
||||||
|
|
||||||
for cmd in iptables ip6tables; do
|
for _owner_id in $_owner_ids; do
|
||||||
$cmd -t mangle -N "$_chain" 2>/dev/null || true
|
for cmd in iptables ip6tables; do
|
||||||
|
$cmd -t mangle -N "$_chain" 2>/dev/null || true
|
||||||
|
|
||||||
if ! $cmd -t mangle -C OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain" 2>/dev/null; then
|
if ! $cmd -t mangle -C OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain" 2>/dev/null; then
|
||||||
$cmd -t mangle -A OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain"
|
$cmd -t mangle -A OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
|
if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
|
||||||
$cmd -t mangle -A "$_chain" -j RETURN
|
$cmd -t mangle -A "$_chain" -j RETURN
|
||||||
fi
|
fi
|
||||||
$cmd -t mangle -L OUTPUT -v -n -x
|
$cmd -t mangle -L OUTPUT -v -n -x
|
||||||
|
done
|
||||||
done
|
done
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
__main
|
__main
|
||||||
@@ -31,5 +32,6 @@ __main
|
|||||||
__help() {
|
__help() {
|
||||||
cat >/dev/null <<-'EOF'
|
cat >/dev/null <<-'EOF'
|
||||||
|
|
||||||
|
|
||||||
EOF
|
EOF
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user