14-ipsetrules

#!/bin/sh

set -e

IPSET_EXEC=/sbin/ipset
IPSET_LIST=/etc/iptables/ipset.rules

rc=0

load_rules()
{
    if [ ! -f $IPSET_LIST ]; then
        echo "Warning: skipping IPSET (no rules to load)"
    else
        $IPSET_EXEC destroy
        $IPSET_EXEC restore < $IPSET_LIST 2> /dev/null
        if [ $? -ne 0 ]; then
            rc=1
        fi
    fi
}

save_rules()
{
    touch $IPSET_LIST
    chmod 0640 $IPSET_LIST
    $IPSET_EXEC save > $IPSET_LIST
    if [ $? -ne 0 ]; then
        rc=1
    fi

}

flush_rules()
{
    $IPSET_EXEC destroy
    if [ $? -ne 0 ]; then
        rc=1
    fi
}

if [ ! -x $IPSET_EXEC ]; then
    echo "Warning: $IPSET_EXEC not exist"
    exit 2
fi

case "$1" in
start|restart|reload|force-reload)
    load_rules
    ;;
save)
    save_rules
    ;;
stop)
    echo "Automatic flushing disabled, use \"flush\" instead of \"stop\""
    ;;
flush)
    flush_rules
    ;;
*)
    echo "Usage: $0 {start|restart|reload|force-reload|save|flush}" >&2
    exit 1
    ;;
esac

exit $rc