Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
a2disconf	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2dismod	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2dissite	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2enconf	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2enmod	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2ensite	15.89 KB	-rwxr-xr-x	2019-06-16 11:49
a2query	9.64 KB	-rwxr-xr-x	2022-03-18 13:54
accessdb	10.23 KB	-rwxrwxrwx	2016-12-13 14:10
add-shell	860 B	-rwxrwxrwx	2017-04-02 19:10
addgnupghome	3.01 KB	-rwxrwxrwx	2019-02-07 21:57
addgroup	33.7 KB	-rwxrwxrwx	2016-06-27 00:55
adduser	33.7 KB	-rwxrwxrwx	2016-06-27 00:55
anacron	34.02 KB	-rwxr-xr-x	2017-05-29 18:36
apache2	651.16 KB	-rwxr-xr-x	2022-03-18 13:54
apache2ctl	7.05 KB	-rwxr-xr-x	2019-10-13 17:39
apachectl	7.05 KB	-rwxr-xr-x	2019-10-13 17:39
applygnupgdefaults	2.17 KB	-rwxrwxrwx	2019-02-07 21:57
arp	62.03 KB	-rwxrwxrwx	2016-12-26 06:58
arpaname	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
arpd	46.84 KB	-rwxrwxrwx	2017-11-24 10:22
aspell-autobuildhash	13.22 KB	-rwxrwxrwx	2016-10-10 11:58
backup-manager	6.94 KB	-rwxrwxrwx	2016-08-23 12:51
bacula-console	44.77 KB	-rwxr-xr-x	2020-08-26 20:03
bacula-fd	239.47 KB	-rwxr-xr-x	2020-08-26 20:03
bconsole	44.77 KB	-rwxr-xr-x	2020-08-26 20:03
biosdecode	18.82 KB	-rwxrwxrwx	2016-09-01 04:59
bsmtp	18.52 KB	-rwxr-xr-x	2020-08-26 20:03
btraceback	2.27 KB	-rwxr-xr-x	2020-08-26 20:03
check_forensic	952 B	-rwxr-xr-x	2011-04-26 17:10
chgpasswd	57.8 KB	-rwxr-xr-x	2021-03-17 10:27
chpasswd	49.9 KB	-rwxr-xr-x	2021-03-17 10:27
chroot	38.88 KB	-rwxrwxrwx	2017-02-22 13:23
clamd	202.1 KB	-rwxr-xr-x	2022-05-27 11:18
clamonacc	190.09 KB	-rwxr-xr-x	2022-05-27 11:18
convertquota	71.74 KB	-rwxrwxrwx	2018-02-24 07:55
cpgr	52 KB	-rwxr-xr-x	2021-03-17 10:27
cppw	52 KB	-rwxr-xr-x	2021-03-17 10:27
cron	47.48 KB	-rwxr-xr-x	2021-10-29 22:04
dbconfig-generate-include	12.37 KB	-rwxrwxrwx	2017-01-05 20:23
dbconfig-load-include	5.57 KB	-rwxrwxrwx	2017-01-05 20:23
ddns-confgen	17.99 KB	-rwxr-xr-x	2022-03-19 14:43
delgroup	15.43 KB	-rwxrwxrwx	2016-06-27 00:55
deluser	15.43 KB	-rwxrwxrwx	2016-06-27 00:55
dmidecode	102.49 KB	-rwxrwxrwx	2016-09-01 04:59
dnssec-checkds	10.66 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-coverage	28.07 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-dsfromkey	50 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-dsfromkey-pkcs11	50 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-importkey	50 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-importkey-pkcs11	50 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-keyfromlabel	54 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-keyfromlabel-pkcs11	54 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-keygen	62 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-keygen-pkcs11	62 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-revoke	46 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-revoke-pkcs11	46 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-settime	54 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-settime-pkcs11	54 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-signzone	102.03 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-signzone-pkcs11	102.03 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-verify	46.01 KB	-rwxr-xr-x	2022-03-19 14:43
dnssec-verify-pkcs11	46.01 KB	-rwxr-xr-x	2022-03-19 14:43
dovecot	86.09 KB	-rwxr-xr-x	2021-01-05 13:19
dpkg-preconfigure	3.52 KB	-rwxrwxrwx	2017-05-21 19:08
dpkg-reconfigure	4.23 KB	-rwxrwxrwx	2017-05-21 19:08
e2freefrag	10.07 KB	-rwxrwxrwx	2020-07-25 11:03
e4crypt	22.07 KB	-rwxrwxrwx	2020-07-25 11:03
e4defrag	25.99 KB	-rwxrwxrwx	2020-07-25 11:03
edquota	80.11 KB	-rwxrwxrwx	2018-02-24 07:55
fdformat	30.66 KB	-rwxrwxrwx	2018-03-07 19:29
filefrag	14.02 KB	-rwxrwxrwx	2020-07-25 11:03
genccode	10.59 KB	-rwxr-xr-x	2021-10-12 12:29
gencmn	10.64 KB	-rwxr-xr-x	2021-10-12 12:29
genl	50.79 KB	-rwxrwxrwx	2017-11-24 10:22
gennorm2	43.38 KB	-rwxr-xr-x	2021-10-12 12:29
genrandom	10 KB	-rwxr-xr-x	2022-03-19 14:43
gensprep	18.98 KB	-rwxr-xr-x	2021-10-12 12:29
groupadd	57.86 KB	-rwxr-xr-x	2021-03-17 10:27
groupdel	53.65 KB	-rwxr-xr-x	2021-03-17 10:27
groupmems	53.84 KB	-rwxr-xr-x	2021-03-17 10:27
groupmod	68.22 KB	-rwxr-xr-x	2021-03-17 10:27
grpck	53.77 KB	-rwxr-xr-x	2021-03-17 10:27
grpconv	49.65 KB	-rwxr-xr-x	2021-03-17 10:27
grpunconv	49.65 KB	-rwxr-xr-x	2021-03-17 10:27
grub-bios-setup	790.19 KB	-rwxrwxrwx	2019-06-12 13:20
grub-install	996.58 KB	-rwxrwxrwx	2019-06-12 13:20
grub-macbless	777.88 KB	-rwxrwxrwx	2019-06-12 13:20
grub-mkconfig	7.82 KB	-rwxrwxrwx	2019-06-12 13:20
grub-mkdevicemap	204.47 KB	-rwxrwxrwx	2019-06-12 13:20
grub-probe	790.19 KB	-rwxrwxrwx	2019-06-12 13:20
grub-reboot	4.01 KB	-rwxrwxrwx	2019-06-12 13:20
grub-set-default	3.48 KB	-rwxrwxrwx	2019-06-12 13:20
httxt2dbm	9.99 KB	-rwxr-xr-x	2022-03-18 13:54
iconvconfig	22.66 KB	-rwxrwxrwx	2019-02-06 22:17
icupkg	19.18 KB	-rwxr-xr-x	2021-10-12 12:29
inetd	34.38 KB	-rwxrwxrwx	2017-01-02 11:49
install-sgmlcatalog	4.44 KB	-rwxrwxrwx	2016-11-07 08:06
invoke-rc.d	17.69 KB	-rwxrwxrwx	2017-05-02 12:20
ip6tables-apply	6.85 KB	-rwxrwxrwx	2017-04-12 11:41
iptables-apply	6.85 KB	-rwxrwxrwx	2017-04-12 11:41
irqbalance	55.38 KB	-rwxrwxrwx	2017-03-10 19:56
isc-hmac-fixup	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
ispell-autobuildhash	15.39 KB	-rwxrwxrwx	2016-10-10 11:58
ldattach	30.71 KB	-rwxrwxrwx	2018-03-07 19:29
locale-gen	1.5 KB	-rwxrwxrwx	2017-07-31 16:32
logrotate	75.27 KB	-rwxrwxrwx	2017-01-07 19:54
logwatch	58 KB	-rwxr-xr-x	2017-01-21 17:44
make-ssl-cert	3.78 KB	-rwxrwxrwx	2017-04-28 21:58
mkinitramfs	10.01 KB	-rwxrwxrwx	2017-04-26 03:00
mklost+found	9.99 KB	-rwxrwxrwx	2020-07-25 11:03
mysqld	17.05 MB	-rwxr-xr-x	2021-03-22 19:49
named	622.24 KB	-rwxr-xr-x	2022-03-19 14:43
named-checkconf	34.19 KB	-rwxr-xr-x	2022-03-19 14:43
named-checkzone	30.19 KB	-rwxr-xr-x	2022-03-19 14:43
named-compilezone	30.19 KB	-rwxr-xr-x	2022-03-19 14:43
named-journalprint	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
named-pkcs11	622.24 KB	-rwxr-xr-x	2022-03-19 14:43
named-rrchecker	13.99 KB	-rwxr-xr-x	2022-03-19 14:43
netfilter-persistent	1.05 KB	-rwxr-xr-x	2020-05-02 21:33
newusers	78.43 KB	-rwxr-xr-x	2021-03-17 10:27
nfnl_osf	13.99 KB	-rwxrwxrwx	2017-04-12 11:41
nginx	1.01 MB	-rwxr-xr-x	2021-06-07 21:02
nologin	5.99 KB	-rwxr-xr-x	2021-03-17 10:27
nsec3hash	10 KB	-rwxr-xr-x	2022-03-19 14:43
ntp-keygen	73.77 KB	-rwxrwxrwx	2018-02-15 12:45
ntp-wait	3.13 KB	-rwxrwxrwx	2018-02-15 12:45
ntpd	713.22 KB	-rwxrwxrwx	2018-02-15 12:45
ntpdate	75.17 KB	-rwxrwxrwx	2018-02-15 12:45
ntpdate-debian	534 B	-rwxrwxrwx	2018-02-15 12:45
ntptime	18.12 KB	-rwxrwxrwx	2018-02-15 12:45
ownership	10.13 KB	-rwxrwxrwx	2016-09-01 04:59
pam-auth-update	19.03 KB	-rwxrwxrwx	2017-05-27 17:44
pam_getenv	2.82 KB	-rwxrwxrwx	2017-05-27 17:44
pam_timestamp_check	10.37 KB	-rwxrwxrwx	2017-05-27 17:44
paperconfig	4.07 KB	-rwxrwxrwx	2016-11-11 12:28
passenger-memory-stats	5.65 KB	-rwxrwxrwx	2019-03-17 19:40
passenger-status	10.68 KB	-rwxrwxrwx	2019-03-17 19:40
phpdismod	7.11 KB	-rwxrwxrwx	2017-01-01 20:43
phpenmod	7.11 KB	-rwxrwxrwx	2017-01-01 20:43
phpquery	6.26 KB	-rwxrwxrwx	2017-01-01 20:43
pkcs11-destroy	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
pkcs11-keygen	15.58 KB	-rwxr-xr-x	2022-03-19 14:43
pkcs11-list	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
pkcs11-tokens	9.99 KB	-rwxr-xr-x	2022-03-19 14:43
pma-configure	299 B	-rwxr-xr-x	2020-10-23 11:41
pma-secure	157 B	-rwxr-xr-x	2020-10-23 11:41
postalias	17.99 KB	-rwxr-xr-x	2020-02-16 20:59
postcat	14.06 KB	-rwxr-xr-x	2020-02-16 20:59
postconf	175.28 KB	-rwxr-xr-x	2020-02-16 20:59
postdrop	14.12 KB	-rwxr-sr-x	2020-02-16 20:59
postfix	14.07 KB	-rwxr-xr-x	2020-02-16 20:59
postfix-add-filter	4.9 KB	-rwxrwxrwx	2020-02-16 20:59
postfix-add-policy	3.83 KB	-rwxrwxrwx	2020-02-16 20:59
postkick	9.99 KB	-rwxr-xr-x	2020-02-16 20:59
postlock	9.99 KB	-rwxr-xr-x	2020-02-16 20:59
postlog	10.15 KB	-rwxr-xr-x	2020-02-16 20:59
postmap	17.99 KB	-rwxr-xr-x	2020-02-16 20:59
postmulti	26.38 KB	-rwxr-xr-x	2020-02-16 20:59
postqueue	22.07 KB	-rwxr-sr-x	2020-02-16 20:59
postsuper	22.32 KB	-rwxr-xr-x	2020-02-16 20:59
posttls-finger	34.09 KB	-rwxrwxrwx	2020-02-16 20:59
pure-authd	18.41 KB	-rwxrwxrwx	2016-12-08 13:28
pure-ftpd	161.4 KB	-rwxrwxrwx	2016-12-08 13:28
pure-ftpd-control	1.68 KB	-rwxrwxrwx	2016-12-08 13:28
pure-ftpd-virtualchroot	165.4 KB	-rwxrwxrwx	2016-12-08 13:28
pure-ftpd-wrapper	12.16 KB	-rwxrwxrwx	2016-12-08 13:28
pure-ftpwho	22.02 KB	-rwxrwxrwx	2016-12-08 13:28
pure-mrtginfo	9.99 KB	-rwxrwxrwx	2016-12-08 13:28
pure-quotacheck	14.01 KB	-rwxrwxrwx	2016-12-08 13:28
pure-uploadscript	14.26 KB	-rwxrwxrwx	2016-12-08 13:28
pwck	49.84 KB	-rwxr-xr-x	2021-03-17 10:27
pwconv	45.74 KB	-rwxr-xr-x	2021-03-17 10:27
pwunconv	41.72 KB	-rwxr-xr-x	2021-03-17 10:27
qmqp-sink	13.99 KB	-rwxrwxrwx	2020-02-16 20:59
qmqp-source	18.01 KB	-rwxrwxrwx	2020-02-16 20:59
qshape	12.55 KB	-rwxrwxrwx	2020-02-16 20:59
quot	67.48 KB	-rwxrwxrwx	2018-02-24 07:55
quota_nld	75.8 KB	-rwxrwxrwx	2018-02-24 07:55
quotastats	14.38 KB	-rwxrwxrwx	2018-02-24 07:55
quotatool	26.45 KB	-rwxrwxrwx	2014-12-21 21:54
readprofile	18.59 KB	-rwxrwxrwx	2018-03-07 19:29
remove-default-ispell	2.86 KB	-rwxrwxrwx	2016-10-10 11:58
remove-default-wordlist	2.86 KB	-rwxrwxrwx	2016-10-10 11:58
remove-shell	904 B	-rwxrwxrwx	2017-04-02 19:10
repquota	72.05 KB	-rwxrwxrwx	2018-02-24 07:55
rmail	13.99 KB	-rwxrwxrwx	2020-02-16 20:59
rmt	55.03 KB	-rwxr-xr-x	2021-11-27 22:50
rmt-tar	55.03 KB	-rwxr-xr-x	2021-11-27 22:50
rndc	29.99 KB	-rwxr-xr-x	2022-03-19 14:43
rndc-confgen	17.99 KB	-rwxr-xr-x	2022-03-19 14:43
rpc.rquotad	75.96 KB	-rwxrwxrwx	2018-02-24 07:55
rsyslogd	636.3 KB	-rwxr-xr-x	2022-05-20 21:25
rtcwake	42.81 KB	-rwxrwxrwx	2018-03-07 19:29
safe_finger	10.08 KB	-rwxrwxrwx	2016-12-26 00:08
select-default-ispell	3.23 KB	-rwxrwxrwx	2016-10-10 11:58
select-default-wordlist	3.21 KB	-rwxrwxrwx	2016-10-10 11:58
sendmail	26.15 KB	-rwxr-xr-x	2020-02-16 20:59
service	9.83 KB	-rwxrwxrwx	2017-05-02 12:20
setquota	84.11 KB	-rwxrwxrwx	2018-02-24 07:55
smartctl	663.63 KB	-rwxrwxrwx	2016-07-30 19:10
smartd	591.07 KB	-rwxrwxrwx	2016-07-30 19:10
smtp-sink	30.93 KB	-rwxrwxrwx	2020-02-16 20:59
smtp-source	22.02 KB	-rwxrwxrwx	2020-02-16 20:59
snmpd	30.01 KB	-rwxr-xr-x	2020-08-04 17:15
split-logfile	2.36 KB	-rwxr-xr-x	2022-03-18 13:54
sshd	772.48 KB	-rwxrwxrwx	2019-07-15 15:32
tarcat	936 B	-rwxr-xr-x	2021-11-27 22:50
tcpd	10 KB	-rwxrwxrwx	2016-12-26 00:08
tcpdchk	22.13 KB	-rwxrwxrwx	2016-12-26 00:08
tcpdmatch	18.04 KB	-rwxrwxrwx	2016-12-26 00:08
tcpdump	1007.6 KB	-rwxr-xr-x	2020-11-10 15:22
tcptraceroute	1.56 KB	-rwxrwxrwx	2016-08-29 17:45
tcptraceroute.db	1.56 KB	-rwxrwxrwx	2016-08-29 17:45
traceroute	67.16 KB	-rwxrwxrwx	2016-08-29 17:45
try-from	10 KB	-rwxrwxrwx	2016-12-26 00:08
tsig-keygen	17.99 KB	-rwxr-xr-x	2022-03-19 14:43
tunelp	26.61 KB	-rwxrwxrwx	2018-03-07 19:29
tzconfig	106 B	-rwxr-xr-x	2019-10-11 09:23
ufw	4.4 KB	-rwx------	2017-01-10 22:16
unhide	38.26 KB	-rwxrwxrwx	2019-12-17 18:08
unhide-linux	38.26 KB	-rwxrwxrwx	2019-12-17 18:08
unhide-posix	10 KB	-rwxrwxrwx	2019-12-17 18:08
unhide-tcp	18.85 KB	-rwxrwxrwx	2019-12-17 18:08
unhide.rb	13.97 KB	-rwxrwxrwx	2015-11-09 01:23
unhide_rb	14.09 KB	-rwxrwxrwx	2019-12-17 18:08
update-ca-certificates	4.85 KB	-rwxr-xr-x	2021-03-13 18:38
update-catalog	9.15 KB	-rwxrwxrwx	2016-11-07 08:06
update-default-aspell	1 KB	-rwxrwxrwx	2016-10-10 11:58
update-default-ispell	9.68 KB	-rwxrwxrwx	2016-10-10 11:58
update-default-wordlist	7.5 KB	-rwxrwxrwx	2016-10-10 11:58
update-dictcommon-aspell	1 KB	-rwxrwxrwx	2016-10-10 11:58
update-dictcommon-hunspell	782 B	-rwxrwxrwx	2016-10-10 11:58
update-grub	64 B	-rwxrwxrwx	2019-06-12 13:20
update-grub2	64 B	-rwxrwxrwx	2019-06-12 13:20
update-gsfontmap	450 B	-rwxr-xr-x	2022-05-01 17:15
update-inetd	6.05 KB	-rwxrwxrwx	2017-01-15 12:37
update-initramfs	8.02 KB	-rwxrwxrwx	2017-03-06 23:42
update-locale	2.99 KB	-rwxrwxrwx	2016-03-21 00:45
update-mime	8.84 KB	-rwxrwxrwx	2016-05-01 13:20
update-passwd	30.41 KB	-rwxrwxrwx	2017-01-16 16:52
update-rc.d	15.69 KB	-rwxrwxrwx	2017-05-02 12:20
update-xmlcatalog	16.88 KB	-rwxrwxrwx	2016-11-07 15:53
upgrade-from-grub-legacy	1.49 KB	-rwxrwxrwx	2019-06-12 13:20
useradd	119.29 KB	-rwxr-xr-x	2021-03-17 10:27
userdel	82.49 KB	-rwxr-xr-x	2021-03-17 10:27
usermod	119.1 KB	-rwxr-xr-x	2021-03-17 10:27
validlocale	1.73 KB	-rwxrwxrwx	2016-03-21 00:45
vigr	60.22 KB	-rwxr-xr-x	2021-03-17 10:27
vipw	60.22 KB	-rwxr-xr-x	2021-03-17 10:27
visudo	200.34 KB	-rwxr-xr-x	2021-01-23 10:10
vpddecode	14.27 KB	-rwxrwxrwx	2016-09-01 04:59
warnquota	84.11 KB	-rwxrwxrwx	2018-02-24 07:55
xqmstats	14.36 KB	-rwxrwxrwx	2018-02-24 07:55
zic	42.54 KB	-rwxrwxrwx	2019-02-06 22:17

Rename

#!/bin/bash
# iptables-apply -- a safer way to update iptables remotely
#
# Usage:
#   iptables-apply [-hV] [-t timeout] [-w savefile] {[rulesfile]|-c [runcmd]}
#
# Versions:
#   * 1.0 Copyright 2006 Martin F. Krafft <madduck@madduck.net>
#         Original version
#   * 1.1 Copyright 2010 GW <gw.2010@tnode.com or http://gw.tnode.com/>
#         Added parameter -c (run command)
#         Added parameter -w (save successfully applied rules to file)
#         Major code cleanup
#
# Released under the terms of the Artistic Licence 2.0
#
set -eu

PROGNAME="${0##*/}"
VERSION=1.1

### Default settings

DEF_TIMEOUT=10

MODE=0  # apply rulesfile mode
# MODE=1  # run command mode

case "$PROGNAME" in
	(*6*)
		SAVE=ip6tables-save
		RESTORE=ip6tables-restore
		DEF_RULESFILE="/etc/network/ip6tables.up.rules"
		DEF_SAVEFILE="$DEF_RULESFILE"
		DEF_RUNCMD="/etc/network/ip6tables.up.run"
		;;
	(*)
		SAVE=iptables-save
		RESTORE=iptables-restore
		DEF_RULESFILE="/etc/network/iptables.up.rules"
		DEF_SAVEFILE="$DEF_RULESFILE"
		DEF_RUNCMD="/etc/network/iptables.up.run"
		;;
esac

### Functions

function blurb() {
	cat <<-__EOF__
	$PROGNAME $VERSION -- a safer way to update iptables remotely
	__EOF__
}

function copyright() {
	cat <<-__EOF__
	$PROGNAME has been published under the terms of the Artistic Licence 2.0.

Original version - Copyright 2006 Martin F. Krafft <madduck@madduck.net>.
	Version 1.1 - Copyright 2010 GW <gw.2010@tnode.com or http://gw.tnode.com/>.
	__EOF__
}

function about() {
	blurb
	echo
	copyright
}

function usage() {
	blurb
	echo
	cat <<-__EOF__
	Usage:
	  $PROGNAME [-hV] [-t timeout] [-w savefile] {[rulesfile]|-c [runcmd]}

The script will try to apply a new rulesfile (as output by iptables-save,
	read by iptables-restore) or run a command to configure iptables and then
	prompt the user whether the changes are okay. If the new iptables rules cut
	the existing connection, the user will not be able to answer affirmatively.
	In this case, the script rolls back to the previous working iptables rules
	after the timeout expires.

Successfully applied rules can also be written to savefile and later used
	to roll back to this state. This can be used to implement a store last good
	configuration mechanism when experimenting with an iptables setup script:
	  $PROGNAME -w $DEF_SAVEFILE -c $DEF_RUNCMD

When called as ip6tables-apply, the script will use ip6tables-save/-restore
	and IPv6 default values instead. Default value for rulesfile is
	'$DEF_RULESFILE'.

Options:

-t seconds, --timeout seconds
	  Specify the timeout in seconds (default: $DEF_TIMEOUT).
	-w savefile, --write savefile
	  Specify the savefile where successfully applied rules will be written to
	  (default if empty string is given: $DEF_SAVEFILE).
	-c runcmd, --command runcmd
	  Run command runcmd to configure iptables instead of applying a rulesfile
	  (default: $DEF_RUNCMD).
	-h, --help
	  Display this help text.
	-V, --version
	  Display version information.

__EOF__
}

function checkcommands() {
	for cmd in "${COMMANDS[@]}"; do
		if ! command -v "$cmd" >/dev/null; then
			echo "Error: needed command not found: $cmd" >&2
			exit 127
		fi
	done
}

function revertrules() {
	echo -n "Reverting to old iptables rules... "
	"$RESTORE" <"$TMPFILE"
	echo "done."
}

### Parsing and checking parameters

TIMEOUT="$DEF_TIMEOUT"
SAVEFILE=""

SHORTOPTS="t:w:chV";
LONGOPTS="timeout:,write:,command,help,version";

OPTS=$(getopt -s bash -o "$SHORTOPTS" -l "$LONGOPTS" -n "$PROGNAME" -- "$@") || exit $?
for opt in $OPTS; do
	case "$opt" in
		(-*)
			unset OPT_STATE
			;;
		(*)
			case "${OPT_STATE:-}" in
				(SET_TIMEOUT) eval TIMEOUT=$opt;;
				(SET_SAVEFILE)
					eval SAVEFILE=$opt
					[ -z "$SAVEFILE" ] && SAVEFILE="$DEF_SAVEFILE"
					;;
			esac
			;;
	esac

# Validate parameters
if [ "$TIMEOUT" -ge 0 ] 2>/dev/null; then
	TIMEOUT=$(($TIMEOUT))
else
	echo "Error: timeout must be a positive number" >&2
	exit 1
fi

if [ -n "$SAVEFILE" -a -e "$SAVEFILE" -a ! -w "$SAVEFILE" ]; then
	echo "Error: savefile not writable: $SAVEFILE" >&2
	exit 8
fi

case "$MODE" in
	(1)
		# Treat parameter as runcmd (run command mode)
		RUNCMD="${1:-$DEF_RUNCMD}"
		if [ ! -x "$RUNCMD" ]; then
			echo "Error: runcmd not executable: $RUNCMD" >&2
			exit 6
		fi

# Needed commands
		COMMANDS=(mktemp "$SAVE" "$RESTORE" "$RUNCMD")
		checkcommands
		;;
	(*)
		# Treat parameter as rulesfile (apply rulesfile mode)
		RULESFILE="${1:-$DEF_RULESFILE}";
		if [ ! -r "$RULESFILE" ]; then
			echo "Error: rulesfile not readable: $RULESFILE" >&2
			exit 2
		fi

# Needed commands
		COMMANDS=(mktemp "$SAVE" "$RESTORE")
		checkcommands
		;;
esac

### Begin work

# Store old iptables rules to temporary file
TMPFILE=`mktemp /tmp/$PROGNAME-XXXXXXXX`
trap "rm -f $TMPFILE" EXIT 1 2 3 4 5 6 7 8 10 11 12 13 14 15

if ! "$SAVE" >"$TMPFILE"; then
	# An error occured
	if ! grep -q ipt /proc/modules 2>/dev/null; then
		echo "Error: iptables support lacking from the kernel" >&2
		exit 3
	else
		echo "Error: unknown error saving old iptables rules: $TMPFILE" >&2
		exit 4
	fi
fi

# Legacy to stop the fail2ban daemon if present
[ -x /etc/init.d/fail2ban ] && /etc/init.d/fail2ban stop

# Configure iptables
case "$MODE" in
	(1)
		# Run command in background and kill it if it times out
		echo -n "Running command '$RUNCMD'... "
		"$RUNCMD" &
		CMD_PID=$!
		( sleep "$TIMEOUT"; kill "$CMD_PID" 2>/dev/null; exit 0 ) &
		CMDTIMEOUT_PID=$!
		if ! wait "$CMD_PID"; then
			echo "failed."
			echo "Error: unknown error running command: $RUNCMD" >&2
			revertrules
			exit 7
		else
			echo "done."
		fi
		;;
	(*)
		# Apply iptables rulesfile
		echo -n "Applying new iptables rules from '$RULESFILE'... "
		if ! "$RESTORE" <"$RULESFILE"; then
			echo "failed."
			echo "Error: unknown error applying new iptables rules: $RULESFILE" >&2
			revertrules
			exit 5
		else
			echo "done."
		fi
		;;
esac

# Prompt user for confirmation
echo -n "Can you establish NEW connections to the machine? (y/N) "

read -n1 -t "$TIMEOUT" ret 2>&1 || :
case "${ret:-}" in
	(y*|Y*)
		# Success
		echo

if [ ! -z "$SAVEFILE" ]; then
			# Write successfully applied rules to the savefile
			echo "Writing successfully applied rules to '$SAVEFILE'..."
			if ! "$SAVE" >"$SAVEFILE"; then
				echo "Error: unknown error writing successfully applied rules: $SAVEFILE" >&2
				exit 9
			fi
		fi

echo "... then my job is done. See you next time."
		;;
	(*)
		# Failed
		echo
		if [ -z "${ret:-}" ]; then
			echo "Timeout! Something happened (or did not). Better play it safe..."
		else
			echo "No affirmative response! Better play it safe..."
		fi
		revertrules
		exit 255
		;;
esac

# Legacy to start the fail2ban daemon again
[ -x /etc/init.d/fail2ban ] && /etc/init.d/fail2ban start

exit 0

# vim:noet:sw=8