#!/bin/sh

IPTCMD=/usr/sbin/iptables 
IPT6CMD=/usr/sbin/ip6tables 

stop_firewall(){
	$IPTCMD -F FORWARD
	$IPTCMD -F INPUT
	$IPTCMD -F OUTPUT

	$IPTCMD -P FORWARD ACCEPT
	$IPTCMD -P INPUT   ACCEPT
	$IPTCMD -P OUTPUT  ACCEPT

	log_success_msg "Firwall stopped"

}

start_firewall(){
	$IPTCMD -F FORWARD
	$IPTCMD -F INPUT
	$IPTCMD -F OUTPUT

	$IPTCMD -P FORWARD DROP
	$IPTCMD -P INPUT   ACCEPT
	$IPTCMD -P OUTPUT  ACCEPT


	$IPTCMD -A INPUT -s 127.0.0.0/24 -j ACCEPT
	$IPTCMD -A INPUT -s 192.168.0.0/16 -j ACCEPT
	$IPTCMD -A INPUT -s 212.126.64.0/19 -j ACCEPT
	$IPTCMD -A INPUT -s 127.0.0.0/8 -j ACCEPT
	$IPTCMD -A INPUT -s 192.133.109.0/24 -j ACCEPT
	$IPTCMD -A INPUT -p tcp --dport 69  -j ACCEPT
	$IPTCMD -A INPUT -p udp --dport 69  -j ACCEPT


	$IPTCMD -A INPUT -p tcp --dport 23  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 22  -j DROP
#	$IPTCMD -A INPUT -p tcp --dport 80  -j DROP
#	$IPTCMD -A INPUT -p tcp --dport 443  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 5900:5930 --j DROP
	$IPTCMD -A INPUT -p tcp --dport 9000  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 6000  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 5433  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 5432  -j DROP
	$IPTCMD -A INPUT -p tcp --dport 57000:57020  -j DROP
	$IPTCMD -A INPUT -p udp --dport 57000:57020  -j DROP

	$IPT6CMD -F FORWARD
	$IPT6CMD -F INPUT
	$IPT6CMD -F OUTPUT

	$IPT6CMD -P FORWARD DROP
	$IPT6CMD -P INPUT   ACCEPT
	$IPT6CMD -P OUTPUT  ACCEPT
	$IPT6CMD -A INPUT -s ::1/128 -j ACCEPT
	$IPT6CMD -A INPUT -s fc00::/7 -j ACCEPT
	$IPT6CMD -A INPUT -s 2001:4100::/32 -j ACCEPT
	$IPT6CMD -A INPUT -p tcp --dport 23  -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 22 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 21 -j DROP
#	$IPT6CMD -A INPUT -p tcp --dport 80 -j DROP
#	$IPT6CMD -A INPUT -p tcp --dport 443 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 5900:5930 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 5432 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 5433 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 6000 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 9000 -j DROP
	$IPT6CMD -A INPUT -p tcp --dport 57000:57020 -j DROP
	$IPT6CMD -A INPUT -p udp --dport 57000:57020 -j DROP
	log_success_msg "Firwall started"
	/usr/sbin/ip6route
	log_success_msg "IP6 default gateway set"
}
. /lib/lsb/init-functions
case "${1}" in
   start)
      start_firewall;

      ;;

  stop)
      stop_firewall;
      ;;

   restart)
      ${0} stop
      sleep 1
      ${0} start
      ;;

   *)
      echo "Usage: ${0} {start|stop|restart}"
      exit 1
      ;;
esac

exit 0

# End network