diff options
| author | Stig Thormodsrud <stig@vyatta.com> | 2009-04-24 16:18:14 -0700 |
|---|---|---|
| committer | Stig Thormodsrud <stig@vyatta.com> | 2009-04-24 16:18:14 -0700 |
| commit | 8a4b8a8238220a082d30364631d23da675a48361 (patch) | |
| tree | 4a173137972e7b92d0c87ed91046f3329a30de53 /templates/firewall/ipv6-modify | |
| parent | 974a9ed041c84d9023fd972c5dd6f3648afd6daf (diff) | |
| download | vyatta-cfg-firewall-8a4b8a8238220a082d30364631d23da675a48361.tar.gz vyatta-cfg-firewall-8a4b8a8238220a082d30364631d23da675a48361.zip | |
Move setup/teardown out from top-level firewall node.
Add refcnts to know when to teardown.
Diffstat (limited to 'templates/firewall/ipv6-modify')
| -rw-r--r-- | templates/firewall/ipv6-modify/node.def | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/templates/firewall/ipv6-modify/node.def b/templates/firewall/ipv6-modify/node.def index fe32a27..9ec8f34 100644 --- a/templates/firewall/ipv6-modify/node.def +++ b/templates/firewall/ipv6-modify/node.def @@ -12,6 +12,19 @@ syntax:expression: pattern $VAR(@) "^[^-]" ; "Firewall rule set name cannot star syntax:expression: pattern $VAR(@) "^[^;]*$" ; "Firewall rule set name cannot contain ';'" -end: sudo /opt/vyatta/sbin/vyatta-firewall.pl --update-rules ipv6-modify +end: if sudo /opt/vyatta/sbin/vyatta-firewall.pl --update-rules ipv6-modify "$VAR(@)" ; + then + if [ ${COMMIT_ACTION} = 'DELETE' ] ; + then + if sudo /opt/vyatta/sbin/vyatta-firewall.pl --teardown-ok ipv6-modify ; + then + sudo /opt/vyatta/sbin/vyatta-firewall.pl --teardown ipv6-modify + fi + fi + else + exit 1; + fi + +create: sudo /opt/vyatta/sbin/vyatta-firewall.pl --setup ip6tables help: Set IPv6 modify rule set name |