diff --git a/doc/invoking.html b/doc/invoking.html index 6703999..43f26e0 100644 --- a/doc/invoking.html +++ b/doc/invoking.html @@ -47,7 +47,13 @@ FireHOL has been designed to be a startup service. As such, FireHOL accepts all
FireHOL, a firewall for humans...
© Copyright 2002
diff --git a/firehol.sh b/firehol.sh
index 7f0ac1c..88b0ca4 100755
--- a/firehol.sh
+++ b/firehol.sh
@@ -10,7 +10,7 @@
#
# config: /etc/firehol.conf
#
-# $Id: firehol.sh,v 1.110 2003/03/14 20:36:52 ktsaou Exp $
+# $Id: firehol.sh,v 1.111 2003/03/14 20:59:07 ktsaou Exp $
#
FIREHOL_FILE="${0}"
@@ -3148,8 +3148,27 @@ case "${arg}" in
;;
panic)
- /etc/init.d/iptables panic
- exit $?
+ echo -n $"FireHOL: Blocking all communications:"
+ /sbin/modprobe ip_tables >/dev/null 2>&1
+ tables=`cat /proc/net/ip_tables_names`
+ for t in ${tables}
+ do
+ /sbin/iptables -t "${t}" -F
+ /sbin/iptables -t "${t}" -X
+ /sbin/iptables -t "${t}" -Z
+
+ # Find all default chains in this table.
+ chains=`/sbin/iptables -t "${t}" -nL | grep "^Chain " | cut -d ' ' -f 2`
+ for c in ${chains}
+ do
+ /sbin/iptables -t "${t}" -P "${c}" ACCEPT
+ /sbin/iptables -t "${t}" -A "${c}" -j DROP
+ done
+ done
+ success $"FireHOL: Blocking all communications:"
+ echo
+
+ exit 0
;;
save)
@@ -3193,7 +3212,7 @@ case "${arg}" in
else
cat <<"EOF"
-$Id: firehol.sh,v 1.110 2003/03/14 20:36:52 ktsaou Exp $
+$Id: firehol.sh,v 1.111 2003/03/14 20:59:07 ktsaou Exp $
(C) Copyright 2002, Costa Tsaousis