From 03290d7a8d451fccc2de3b2698b220798ba721c6 Mon Sep 17 00:00:00 2001 From: Oracle Public Cloud User Date: Wed, 14 Feb 2024 18:19:40 +0000 Subject: [PATCH] don't reload firewall-cmd until all commands are added/deleted --- configure_NAT_from_RULES | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/configure_NAT_from_RULES b/configure_NAT_from_RULES index fd7523e..7516f28 100755 --- a/configure_NAT_from_RULES +++ b/configure_NAT_from_RULES @@ -14,7 +14,6 @@ add_NAT_forwarding() { forward_to_port="$6" firewall-cmd --add-rich-rule "rule family=\"ipv4\" destination address=\"$original_destination_ip\" forward-port port=\"$original_destination_port\" protocol=\"$tcp_or_udp\" to-addr=\"$forward_to_ip\" to-port=\"$forward_to_port\"" --permanent > /dev/null - firewall-cmd --reload > /dev/null echo "+ [$interface_source][$tcp_or_udp] $original_destination_ip:$original_destination_port --> $forward_to_ip:$forward_to_port" } @@ -33,7 +32,6 @@ remove_NAT_forwarding() { forward_to_port="$6" firewall-cmd --remove-rich-rule "rule family=\"ipv4\" destination address=\"$original_destination_ip\" forward-port port=\"$original_destination_port\" protocol=\"$tcp_or_udp\" to-addr=\"$forward_to_ip\" to-port=\"$forward_to_port\"" --permanent > /dev/null - firewall-cmd --reload > /dev/null echo "- [$interface_source][$tcp_or_udp] $original_destination_ip:$original_destination_port --> $forward_to_ip:$forward_to_port" } @@ -78,4 +76,6 @@ for rule in "${RULES[@]}"; do esac done +firewall-cmd --reload > /dev/null + echo -e "\nDone! Don't forget to add/remove the rules in the security list."