Begin support of rule cache for quicker loading

master
bbruns 2010-11-25 18:58:30 +00:00
parent 415dbaaf19
commit 2ac9c2d4bd
3 changed files with 8 additions and 2 deletions

View File

@ -144,7 +144,8 @@ if [ "$GEN_CACHE" ]; then
force)
IPTABLES="write_out_rules"
if [ "$IPV6" ]; then
IP6TABLES="write_out_rules"
IP6TABLES="write_out_rules_v6"
rm -f "${RULE_CACHE_V6}" &>/dev/null
fi
rm -f "${RULE_CACHE}" &>/dev/null
;;

View File

@ -119,6 +119,7 @@ function show_help {
echo "Firewall/SOSDG ${FW_VERSION} - Brielle Bruns <bruns@2mbit.com>"
echo -e "\t--help\t\tShows this info"
echo -e "\t--flush\t\tFlushes all rules back to default ACCEPT"
echo -e "\t--generate-cache\tGenerate cached rule file"
}
@ -164,7 +165,10 @@ function apply_ipv4_hack {
echo -en "\n"
}
# write_out_rules
# write_out_rules(_v6)
function write_out_rules {
echo "$*" >> "$RULE_CACHE"
}
function write_out_rules_v6 {
echo "$*" >> "$RULE_CACHE_V6"
}

View File

@ -62,3 +62,4 @@ STATE_TYPE="conntrack"
# Where we store output of cached rules
RULE_CACHE=$BASEDIR/cache/ipt-rules
RULE_CACHE_V6=$BASEDIR/cache/ipt6-rules