#!/bin/bash

PATH=/usr/sbin:/sbin:/bin:/usr/bin:/root/bin

logger -t firewall "running firewall block script for $*"

if [ -f /etc/default/firewall ]; then
   source /etc/default/firewall
fi

# IFWAN=

if [ -z "$TRAVELCOUNTRIES" ]; then TRAVELCOUNTRIES="AT|DE|NO|SE"; fi
if [ -z "$EXCEPTIONS" ]; then EXCEPTIONS="192.168.1|192.168.9"; fi


usage () {
   echo "unblockip [ -f ] IP"
   echo "unblockip -h"
   echo "     blocks IP; -f for no exceptions"
#    echo "unblockip IP"
#    echo "unblockip -h"
#    echo "     unblocks IP"
}

########### START SCRIPT ###########################################################
#

if [ "$1" = "" ]; then 
    usage
    exit 0
fi

if [ "$1" = "-f" ]; then
  FORCE=yes
  shift
else
  FORCE=no
fi

IP=$1

echo "`basename $0 not yet implemented`"
exit 0
############################################################################################
############################################################################################

if [ -d /run ]; then 
  FWLOCK=/run/firewall.lock
  SYNCD=/run
else
  FWLOCK=/tmp/firewall.lock
  SYNCD=/tmp
fi



sync $SYNCD
while [ -f $FWLOCK ]; do
   echo "firewall locked with $FWLOCK; sleeping..."
   sleep 1
   sync $FWLOCK
done
touch $FWLOCK

    if [ "`iptables -L -n -v | grep DROP | egrep "\b$IP\b" | grep 999@ | wc -l`" = "0" ]; then
       echo "$1 not blocked. Done nothing. "
    else
    _realunblock $IP
    echo "OK. $IP was unblocked"
    fi

rm $FWLOCK 2> /dev/null
