From b3f4d7ddb0e4dcd10e856b9adcd458d831bcaeec Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Tue, 19 May 2020 01:17:29 -0600 Subject: [PATCH] Move update-alternatives above iptables commands. --- debian/resources/iptables.sh | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/debian/resources/iptables.sh b/debian/resources/iptables.sh index 1a4fa57..af31107 100755 --- a/debian/resources/iptables.sh +++ b/debian/resources/iptables.sh @@ -11,6 +11,12 @@ cd "$(dirname "$0")" #send a message verbose "Configuring IPTables" +#defaults to nftables by default this enables iptables +if [ ."$os_codename" = ."buster" ]; then + update-alternatives --set iptables /usr/sbin/iptables-legacy + update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy +fi + #run iptables commands iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT @@ -44,12 +50,6 @@ iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT -# Debian 10 - defaults to nftables by default this enables iptables -if [ ."$os_codename" = ."buster" ]; then - update-alternatives --set iptables /usr/sbin/iptables-legacy - update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy -fi - #answer the questions for iptables persistent echo iptables-persistent iptables-persistent/autosave_v4 boolean true | debconf-set-selections echo iptables-persistent iptables-persistent/autosave_v6 boolean true | debconf-set-selections