From b7aa3a878cc1368e00f6fbb09d290220d1767a7a Mon Sep 17 00:00:00 2001
From: bol-van <none@none.none>
Date: Fri, 11 Feb 2022 10:24:35 +0300
Subject: [PATCH] blockcheck: override FWTYPE

---
 blockcheck.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/blockcheck.sh b/blockcheck.sh
index 2f14ad4..da9694c 100755
--- a/blockcheck.sh
+++ b/blockcheck.sh
@@ -159,8 +159,8 @@ check_system()
 
 	UNAME=$(uname)
 	SUBSYS=
-	FWTYPE=
 
+	# can be passed FWTYPE=iptables to override default nftables preference
 	case "$UNAME" in
 		Linux)
 			PKTWS="$NFQWS"
@@ -175,14 +175,14 @@ check_system()
 				# fw4 firewall is used, fw3 is symbolic link to fw4
 				# no more firewall includes
 				# make sure nft was not just installed by user but all the system is based on fw4
-				if [ -x /sbin/fw4 ] && exists nft; then
+				if [ -x /sbin/fw4 ] && exists nft && [ "$FWTYPE" != "iptables" ] ; then
 					FWTYPE=nftables
 				else
 					FWTYPE=iptables
 				fi
 			else
 				# generic linux
-				if exists nft; then
+				if exists nft && [ "$FWTYPE" != "iptables" ]; then
 					FWTYPE=nftables
 				else
 					FWTYPE=iptables