# fix problem with permissions from the old package
if dpkg --compare-versions "$2" lt "2:1.2.11-4"; then
chown -f -Rh root:root /var/lib/iptables /etc/init.d/iptables \
- /etc/default/iptables >/dev/null 2>&1
+ /etc/default/iptables >/dev/null 2>&1 || true
fi
# remove old iptables init script
if [ -e /etc/init.d/iptables ]; then
rm -f /etc/init.d/iptables
- update-rc.d iptables remove
+ update-rc.d -f iptables remove
fi
# check if old default file exists and import it
# REJECT recent if there is none..
# also, save current set of rules into active and inactive configuration
if [ ! -e /var/lib/iptables/active ]; then
- . /usr/share/doc/iptables-cn/examples/ssh-bruteforce
- iptables-save > /var/lib/iptables/active
+ if ! iptables-save | grep '^-' >/dev/null; then
+ echo "CN: Netfilter rules empty: importing SSH bruteforce rules"
+ . /usr/share/doc/iptables-cn/examples/ssh-bruteforce
+ iptables-save > /var/lib/iptables/active
+ fi
fi
-if [ ! -e /var/lib/iptables/inactive ]; then
- . /usr/share/doc/iptables-cn/examples/ssh-bruteforce
- iptables-save > /var/lib/iptables/inactive
-fi
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.