fender.m4, ibanez.m4, vampire.m4: Invoke `footables' via `run'.

diff --git a/fender.m4 b/fender.m4
index 00375a2bc7655f53feefbc65056ed05a0fb0a425..07a441df16ccf633643af219d8b9bd5183974520 100644 (file)
--- a/fender.m4
+++ b/fender.m4
@@ -34,13 +34,13 @@ allowservices inbound tcp \
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.

-iptables -A inbound -p udp -j ACCEPT \
+run iptables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23
        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48
        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48
 
        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48
 

diff --git a/ibanez.m4 b/ibanez.m4
index 617200be408b042983e458d0dd341479ac8f9096..d70b46e8dd6b546c873771ebcb840cd699bb7b9c 100644 (file)
--- a/ibanez.m4
+++ b/ibanez.m4
@@ -36,13 +36,13 @@ allowservices inbound udp \
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.

-iptables -A inbound -p udp -j ACCEPT \
+run iptables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23
        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48
        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48
 
        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48
 

diff --git a/vampire.m4 b/vampire.m4
index bb91c7c61a471d30afb5e92cb227eb5404953e8c..48d25b39c2d2eedec8f180e80989bb3caab5daae 100644 (file)
--- a/vampire.m4
+++ b/vampire.m4
@@ -63,13 +63,13 @@ dnsserver inbound
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.
 ntpclient inbound $ntp_servers
 
 ## Provide NTP service to untrusted clients.

-iptables -A inbound -p udp -j ACCEPT \
+run iptables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23
        --source-port 123 --destination-port 123 \
        -s 172.29.198.0/23

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48
        --source-port 123 --destination-port 123 \
        -s 2001:ba8:1d9::/48

-ip6tables -A inbound -p udp -j ACCEPT \
+run ip6tables -A inbound -p udp -j ACCEPT \

        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48
 
        --source-port 123 --destination-port 123 \
        -s 2001:8b0:c92::/48