Initial commit

This commit is contained in:
Daniel Frank 2019-10-04 21:57:24 +02:00
commit e20016e60a
Signed by: tokudan
GPG key ID: 063CCCAD04182D32
7 changed files with 297 additions and 0 deletions

24
systemd/ipset.service Normal file
View file

@ -0,0 +1,24 @@
[Unit]
Description=Loads ip sets for iptables from /etc/sysconfig/ipset
Before=iptables.service ip6tables.service
After=syslog.target
AssertPathExists=/etc/sysconfig/ipset
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStartPre=-/sbin/ipset create transit_IPv4 hash:net
ExecStartPre=-/sbin/ipset destroy transit_IPv4_tmp
ExecStartPre=-/sbin/ipset create reserved_IPv4 hash:net
ExecStartPre=-/sbin/ipset destroy reserved_IPv4_tmp
ExecStartPre=-/sbin/ipset create transit_IPv6 hash:net family inet6
ExecStartPre=-/sbin/ipset destroy transit_IPv6_tmp
ExecStartPre=-/sbin/ipset create reserved_IPv6 hash:net family inet6
ExecStartPre=-/sbin/ipset destroy reserved_IPv6_tmp
ExecStart=/bin/sh -c "/sbin/ipset restore < /etc/sysconfig/ipset"
ExecStop=/sbin/ipset destroy
StandardOutput=syslog
StandardError=syslog
[Install]
RequiredBy=iptables.service ip6tables.service