pavel/ansible-worker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0937

Browse Source
This commit is contained in:
pavel
2026-01-21 09:37:52 +02:00
parent 51b770daac
commit 0269fd0258
4 changed files with 615 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
files/stopblock.sh Normal file
View File

@@ -0,0 +1,33 @@
#!/bin/sh
set -eu
LAN_IF="br-lan"
LAN_NET="192.168.2.0/24"
# -------------------------
# FILTER: remove CAPTIVE_BLOCK hook + chain
# -------------------------
# Remove any FORWARD jumps that match our hook exactly
while iptables -C FORWARD -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE_BLOCK 2>/dev/null; do
iptables -D FORWARD -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE_BLOCK
done
# Flush/delete CAPTIVE_BLOCK chain if present
iptables -F CAPTIVE_BLOCK 2>/dev/null || true
iptables -X CAPTIVE_BLOCK 2>/dev/null || true
# -------------------------
# NAT: remove CAPTIVE hook + chain
# -------------------------
# Remove any PREROUTING jumps that match our hook exactly
while iptables -t nat -C PREROUTING -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE 2>/dev/null; do
iptables -t nat -D PREROUTING -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE
done
# Flush/delete CAPTIVE chain if present
iptables -t nat -F CAPTIVE 2>/dev/null || true
iptables -t nat -X CAPTIVE 2>/dev/null || true
echo "OK: captive NAT + filter rules removed (baseline preserved)."