if [ ! -e /var/lib/iptables/active ]; then
if ! iptables-save | grep '^-' >/dev/null; then
echo "CN: Netfilter rules empty: importing SSH bruteforce rules"
- . /usr/share/doc/iptables-cn/examples/ssh-bruteforce
+ /usr/share/doc/iptables-cn/examples/ssh-bruteforce \
+ 1>/dev/null 2>&1 || true
fi
echo "CN: Saving current Netfilter rules to /var/lib/iptables/active"
iptables-save > /var/lib/iptables/active