From 84a1da821bf306d06f68bf8896b1be0a2e70b421 Mon Sep 17 00:00:00 2001 From: Antonio Ospite Date: Fri, 27 Apr 2018 10:50:54 +0200 Subject: [PATCH 1/1] Add a Makefile to make it easier to deploy the configuration --- Makefile | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 Makefile diff --git a/Makefile b/Makefile new file mode 100644 index 0000000..e934f47 --- /dev/null +++ b/Makefile @@ -0,0 +1,18 @@ +all: + +deploy-workstation: + if ! diff -q /etc/nftables.conf nftables-workstation.nft > /dev/null; \ + then \ + sudo cp nftables-workstation.nft /etc/nftables.conf; \ + sudo etckeeper vcs commit -m "nftables.conf: import latest upstream config" -- nftables.conf; \ + fi + for ipt in iptables ip6tables; \ + do \ + sudo $$ipt -F; \ + sudo $$ipt -X; \ + for chain in INPUT OUTPUT FORWARD;\ + do \ + sudo $$ipt -P $$chain ACCEPT; \ + done \ + done + sudo systemctl restart nftables.service -- 2.1.4