#!/bin/bash
# central firewall script
# called by /sbin/firewall.on

PATH=/usr/sbin:/sbin:/bin:/usr/bin

logger -t firewall "running firewall script $PID"

if [ -f /etc/default/firewall ]; then
   source /etc/default/firewall
fi

source /lib/firewall/firewall.off

( echo "define ifwan = $IFWAN" ;
  cat /etc/firewall/nft/ipv4fw.nft ) \
    | nft -f -

