34 lines
997 B
Bash
34 lines
997 B
Bash
#!/bin/sh
|
|
set -eu
|
|
|
|
LAN_IF="br-lan"
|
|
LAN_NET="192.168.2.0/24"
|
|
|
|
# -------------------------
|
|
# FILTER: remove CAPTIVE_BLOCK hook + chain
|
|
# -------------------------
|
|
|
|
# Remove any FORWARD jumps that match our hook exactly
|
|
while iptables -C FORWARD -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE_BLOCK 2>/dev/null; do
|
|
iptables -D FORWARD -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE_BLOCK
|
|
done
|
|
|
|
# Flush/delete CAPTIVE_BLOCK chain if present
|
|
iptables -F CAPTIVE_BLOCK 2>/dev/null || true
|
|
iptables -X CAPTIVE_BLOCK 2>/dev/null || true
|
|
|
|
# -------------------------
|
|
# NAT: remove CAPTIVE hook + chain
|
|
# -------------------------
|
|
|
|
# Remove any PREROUTING jumps that match our hook exactly
|
|
while iptables -t nat -C PREROUTING -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE 2>/dev/null; do
|
|
iptables -t nat -D PREROUTING -i "$LAN_IF" -s "$LAN_NET" -j CAPTIVE
|
|
done
|
|
|
|
# Flush/delete CAPTIVE chain if present
|
|
iptables -t nat -F CAPTIVE 2>/dev/null || true
|
|
iptables -t nat -X CAPTIVE 2>/dev/null || true
|
|
|
|
echo "OK: filter rules removed"
|