-

netflow/iptables.sh

@@ -8,9 +8,10 @@ __main() {
 	update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
 	update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null
 
-	_owner_id=51000
-	_chain="output_netflow_owner_${_owner_id}"
+	_owner_ids=$(ps -eo gid --no-headers | sort -u)
+	_chain="output_netflow_owner_51000"
 
+	for _owner_id in $_owner_ids; do
 		for cmd in iptables ip6tables; do
 			$cmd -t mangle -N "$_chain" 2>/dev/null || true
 
@@ -23,7 +24,7 @@ __main() {
 			fi
 			$cmd -t mangle -L OUTPUT -v -n -x
 		done
-
+	done
 }
 
 __main
@@ -31,5 +32,6 @@ __main
 __help() {
 	cat >/dev/null <<-'EOF'
 
+
 	EOF
 }