#!/bin/sh ZAPRET=/etc/init.d/zapret check_lan() { IS_LAN= [ -n "$OPENWRT_LAN" ] || OPENWRT_LAN=lan for lan in $OPENWRT_LAN; do [ "$INTERFACE" = "$lan" ] && { IS_LAN=1 break } done } check_need_to_reload_tpws6() { # tpws6 dnat target nft map can only be reloaded within firewall apply procedure # interface ifsets (wanif, wanif6, lanif) can be reloaded independently check_lan RELOAD_TPWS6= [ "$ACTION" = "ifup" -a "$DISABLE_IPV6" != 1 -a -n "$IS_LAN" ] && \ if [ "$TPWS_ENABLE" = 1 ] || dir_is_not_empty "$CUSTOM_DIR/custom.d"; then RELOAD_TPWS6=1; fi } [ -n "$INTERFACE" ] && [ "$ACTION" = ifup -o "$ACTION" = ifdown ] && [ -x "$ZAPRET" ] && "$ZAPRET" enabled && { SCRIPT=$(readlink "$ZAPRET") if [ -n "$SCRIPT" ]; then EXEDIR=$(dirname "$SCRIPT") ZAPRET_BASE=$(readlink -f "$EXEDIR/../..") else ZAPRET_BASE=/opt/zapret fi ZAPRET_RW=${ZAPRET_RW:-"$ZAPRET_BASE"} ZAPRET_CONFIG=${ZAPRET_CONFIG:-"$ZAPRET_RW/config"} CUSTOM_DIR="$ZAPRET_RW/init.d/openwrt" . "$ZAPRET_CONFIG" . "$ZAPRET_BASE/common/base.sh" . "$ZAPRET_BASE/common/fwtype.sh" check_need_to_reload_tpws6 [ -n "$RELOAD_TPWS6" ] && { logger -t zapret restarting daemons due to $ACTION of $INTERFACE to update tpws6 dnat target "$ZAPRET" restart_daemons } linux_fwtype case "$FWTYPE" in nftables) if [ -n "$RELOAD_TPWS6" ] ; then logger -t zapret reloading nftables due to $ACTION of $INTERFACE to update tpws6 dnat target "$ZAPRET" restart_fw else logger -t zapret reloading nftables ifsets due to $ACTION of $INTERFACE "$ZAPRET" reload_ifsets fi ;; iptables) openwrt_fw3 || { logger -t zapret reloading iptables due to $ACTION of $INTERFACE "$ZAPRET" restart_fw } ;; esac }