firewall: clear rpfilter on stop

This commit is contained in:
Boris Sukholitko 2014-11-14 09:07:18 +02:00
parent ea49ac0496
commit 53b24d0c95

View file

@ -187,6 +187,12 @@ let
# Clean up after added ruleset
ip46tables -D INPUT -j nixos-fw 2>/dev/null || true
${optionalString (kernelHasRPFilter && cfg.checkReversePath) ''
if ! ip46tables -D PREROUTING -t raw -m rpfilter --invert -j DROP; then
echo "<2>failed to stop rpfilter support" >&2
fi
''}
${cfg.extraStopCommands}
'';