+ if ! iptables-save | grep '^-' >/dev/null; then
+ echo "CN: Netfilter rules empty: importing SSH bruteforce rules"
+ /usr/share/doc/iptables-cn/examples/ssh-bruteforce \
+ 1>/dev/null 2>&1 || true
+ fi
+ echo "CN: Saving current Netfilter rules to /var/lib/iptables/active"