init.d: fix macos filter mode

This commit is contained in:
bol-van 2021-03-04 15:20:27 +03:00
parent 3703918a4b
commit 792b62f09f

View File

@ -175,14 +175,13 @@ pf_anchor_zapret()
echo "table <nozapret> persist"
fi
}
[ "$DISABLE_IPV4" = "1" ] || {
[ "$DISABLE_IPV6" = "1" ] || {
if [ -f "$ZIPLIST_EXCLUDE6" ]; then
echo "table <nozapret6> persist file \"$ZIPLIST_EXCLUDE6\""
else
echo "table <nozapret6> persist"
fi
}
echo
[ "$DISABLE_IPV4" = "1" ] || echo "rdr-anchor \"/zapret-v4\" inet to !<nozapret>"
[ "$DISABLE_IPV6" = "1" ] || echo "rdr-anchor \"/zapret-v6\" inet6 to !<nozapret6>"
[ "$DISABLE_IPV4" = "1" ] || echo "anchor \"/zapret-v4\" inet to !<nozapret>"
@ -226,6 +225,7 @@ pf_anchor_zapret_v4()
local tbl port
[ "$DISABLE_IPV4" = "1" ] || {
[ "$MODE" = "tpws" ] && {
[ ! "$MODE_HTTP" = "1" ] && [ ! "$MODE_HTTPS" = "1" ] && return
pf_anchor_zapret_tables tbl zapret-user "$ZIPLIST_USER" zapret "$ZIPLIST"
port=$(pf_anchor_port_target)
@ -238,11 +238,13 @@ pf_anchor_zapret_v4()
done
}
}
}
pf_anchor_zapret_v6()
{
local tbl port LL_LAN
[ "$DISABLE_IPV6" = "1" ] || {
[ "$MODE" = "tpws" ] && {
[ ! "$MODE_HTTP" = "1" ] && [ ! "$MODE_HTTPS" = "1" ] && return
# LAN link local is only for router
@ -259,6 +261,7 @@ pf_anchor_zapret_v6()
done
}
}
}
pf_anchors_create()
{
wait_lan_ll
@ -319,12 +322,15 @@ pf_table_reload()
[ "$DISABLE_IPV6" = "1" ] || pfctl -qTl -a zapret-v6 -f "$PF_ANCHOR_ZAPRET_V6"
pfctl -qTl -a zapret -f "$PF_ANCHOR_ZAPRET"
}
zapret_do_firewall()
{
# $1 - 1 - add, 0 - del
case "${MODE}" in
tpws)
tpws|filter)
if [ "$1" = "1" ] ; then
pf_anchor_root || return 1
pf_anchors_create
@ -334,8 +340,6 @@ zapret_do_firewall()
pf_anchors_clear
fi
;;
filter)
;;
*)
echo "unsupported MODE=$MODE"
return 1