From e117a6bd045d53048ce83bd0a1bd20eb89cea8a9 Mon Sep 17 00:00:00 2001 From: Bryan Boreham Date: Thu, 3 Nov 2016 14:20:28 +0000 Subject: [PATCH] Have 'weave reset' remove NPC rules --- weave | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/weave b/weave index f82f9ccd..c808d63a 100755 --- a/weave +++ b/weave @@ -795,6 +795,11 @@ destroy_bridge() { run_iptables -t filter -D INPUT -i $DOCKER_BRIDGE -p udp --dst $DOCKER_BRIDGE_IP --dport $(($PORT + 1)) -j DROP >/dev/null 2>&1 || true run_iptables -t filter -D FORWARD -i $BRIDGE -o $BRIDGE -j ACCEPT 2>/dev/null || true + run_iptables -F WEAVE-NPC >/dev/null 2>&1 || true + run_iptables -t filter -D FORWARD -o $BRIDGE -j WEAVE-NPC 2>/dev/null || true + run_iptables -t filter -D FORWARD -o $BRIDGE -m state --state NEW -j NFLOG --nflog-group 86 2>/dev/null || true + run_iptables -t filter -D FORWARD -o $BRIDGE -j DROP 2>/dev/null || true + run_iptables -X WEAVE-NPC >/dev/null 2>&1 || true run_iptables -t nat -F WEAVE >/dev/null 2>&1 || true run_iptables -t nat -D POSTROUTING -j WEAVE >/dev/null 2>&1 || true run_iptables -t nat -D POSTROUTING -o $BRIDGE -j ACCEPT >/dev/null 2>&1 || true