committing changes in /etc after apt run

Package changes:
+iptables-persistent 1.0.4+nmu2ubuntu1 all
+netfilter-persistent 1.0.4+nmu2ubuntu1 all

diff --git a/.etckeeper b/.etckeeper
index b6a07c2b398243b15038c1a76f9f53e3f7bf44f2..977d4e40b85232093f0656bbd245e49f2d899f4f 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -1117,6 +1117,7 @@ maybe chmod 0644 'default/keyboard'
 maybe chmod 0644 'default/locale'
 maybe chmod 0644 'default/mdadm'
 maybe chmod 0644 'default/motd-news'
+maybe chmod 0644 'default/netfilter-persistent'
 maybe chmod 0644 'default/networkd-dispatcher'
 maybe chmod 0644 'default/networking'
 maybe chmod 0644 'default/nss'
@@ -1734,6 +1735,7 @@ maybe chmod 0755 'init.d/lvm2-lvmpolld'
 maybe chmod 0755 'init.d/mdadm'
 maybe chmod 0755 'init.d/mdadm-waitidle'
 maybe chmod 0755 'init.d/mintsystem'
+maybe chmod 0755 'init.d/netfilter-persistent'
 maybe chmod 0755 'init.d/network-manager'
 maybe chmod 0755 'init.d/networking'
 maybe chmod 0755 'init.d/openvpn'
@@ -1791,6 +1793,9 @@ maybe chmod 0644 'iproute2/rt_scopes'
 maybe chmod 0644 'iproute2/rt_tables'
 maybe chmod 0755 'iproute2/rt_tables.d'
 maybe chmod 0644 'iproute2/rt_tables.d/README'
+maybe chmod 0755 'iptables'
+maybe chmod 0644 'iptables/rules.v4'
+maybe chmod 0644 'iptables/rules.v6'
 maybe chmod 0644 'issue'
 maybe chmod 0644 'issue.net'
 maybe chmod 0755 'java-11-openjdk'

diff --git a/default/netfilter-persistent b/default/netfilter-persistent
new file mode 100644 (file)
index 0000000..7b31799
--- /dev/null
+++ b/default/netfilter-persistent
@@ -0,0 +1,4 @@
+# Configuration for netfilter-persistent
+# Plugins may extend this file or have their own
+
+FLUSH_ON_STOP=0

diff --git a/init.d/netfilter-persistent b/init.d/netfilter-persistent
new file mode 100755 (executable)
index 0000000..1b4f1c0
--- /dev/null
+++ b/init.d/netfilter-persistent
@@ -0,0 +1,50 @@
+#!/bin/sh
+
+# This file is part of netfilter-persistent
+# Copyright (C) 2014 Jonathan Wiltshire
+# 
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation, either version 3
+# of the License, or (at your option) any later version.
+
+### BEGIN INIT INFO
+# Provides:          netfilter-persistent
+# Required-Start:    mountkernfs $remote_fs
+# Required-Stop:     $remote_fs
+# Default-Start:     S
+# Default-Stop:      0 1 6
+# Short-Description: Load boot-time netfilter configuration
+# Description:       Loads boot-time netfilter configuration
+### END INIT INFO
+
+. /lib/lsb/init-functions
+
+case "$1" in
+start|restart|reload|force-reload)
+    log_action_begin_msg "Loading netfilter rules"
+    /usr/sbin/netfilter-persistent start
+    log_action_end_msg $?
+       ;;
+save)
+    log_action_begin_msg "Saving netfilter rules"
+    /usr/sbin/netfilter-persistent save
+    log_action_end_msg $?
+       ;;
+stop)
+    log_action_begin_msg "Stopping netfilter rules"
+    /usr/sbin/netfilter-persistent stop
+    log_action_end_msg $?
+       ;;
+flush)
+    log_action_begin_msg "Flushing netfilter rules"
+    /usr/sbin/netfilter-persistent flush
+    log_action_end_msg $?
+       ;;
+*)
+    echo "Usage: $0 {start|restart|reload|force-reload|save|flush}" >&2
+    exit 1
+    ;;
+esac
+
+exit $rc

diff --git a/iptables/rules.v4 b/iptables/rules.v4
new file mode 100644 (file)
index 0000000..4d52e1b
--- /dev/null
+++ b/iptables/rules.v4
@@ -0,0 +1,7 @@
+# Generated by iptables-save v1.6.1 on Sun May  3 17:28:32 2020
+*filter
+:INPUT ACCEPT [15:144216]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [13:712]
+COMMIT
+# Completed on Sun May  3 17:28:32 2020

diff --git a/iptables/rules.v6 b/iptables/rules.v6
new file mode 100644 (file)
index 0000000..a78d1e1
--- /dev/null
+++ b/iptables/rules.v6
@@ -0,0 +1,7 @@
+# Generated by ip6tables-save v1.6.1 on Sun May  3 17:28:32 2020
+*filter
+:INPUT ACCEPT [0:0]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [0:0]
+COMMIT
+# Completed on Sun May  3 17:28:32 2020

diff --git a/rc0.d/K01netfilter-persistent b/rc0.d/K01netfilter-persistent
new file mode 120000 (symlink)
index 0000000..0729900
--- /dev/null
+++ b/rc0.d/K01netfilter-persistent
@@ -0,0 +1 @@
+../init.d/netfilter-persistent
\ No newline at end of file

diff --git a/rc1.d/K01netfilter-persistent b/rc1.d/K01netfilter-persistent
new file mode 120000 (symlink)
index 0000000..0729900
--- /dev/null
+++ b/rc1.d/K01netfilter-persistent
@@ -0,0 +1 @@
+../init.d/netfilter-persistent
\ No newline at end of file

diff --git a/rc6.d/K01netfilter-persistent b/rc6.d/K01netfilter-persistent
new file mode 120000 (symlink)
index 0000000..0729900
--- /dev/null
+++ b/rc6.d/K01netfilter-persistent
@@ -0,0 +1 @@
+../init.d/netfilter-persistent
\ No newline at end of file

diff --git a/rcS.d/S01netfilter-persistent b/rcS.d/S01netfilter-persistent
new file mode 120000 (symlink)
index 0000000..0729900
--- /dev/null
+++ b/rcS.d/S01netfilter-persistent
@@ -0,0 +1 @@
+../init.d/netfilter-persistent
\ No newline at end of file

diff --git a/systemd/system/multi-user.target.wants/netfilter-persistent.service b/systemd/system/multi-user.target.wants/netfilter-persistent.service
new file mode 120000 (symlink)
index 0000000..8589be0
--- /dev/null
+++ b/systemd/system/multi-user.target.wants/netfilter-persistent.service
@@ -0,0 +1 @@
+/lib/systemd/system/netfilter-persistent.service
\ No newline at end of file