POSTIN
/bin/sh
if [ -r /etc/sysconfig/iptables ]; then
/usr/bin/perl -pi -e 's/.*SSHD.*\n//g' /etc/sysconfig/iptables
/usr/bin/perl -pi -e 's/COMMIT\n//g' /etc/sysconfig/iptables
/bin/cat >> /etc/sysconfig/iptables << EOF
:SSHD - [0:0]
-A INPUT -p tcp -m tcp --dport 22 -j SSHD
COMMIT
EOF
else
/bin/cat > /etc/sysconfig/iptables << EOF
*filter
:INPUT ACCEPT [835:105991]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [368:40879]
:SSHD - [0:0]
-A INPUT -p tcp -m tcp --dport 22 -j SSHD
COMMIT
EOF
fi
/sbin/service iptables condrestart
/sbin/service sshd condrestart
POSTUN
/bin/sh
if [ -r /etc/sysconfig/iptables ]; then
/usr/bin/perl -pi -e 's/.*SSHD.*\n//g' /etc/sysconfig/iptables
fi
/sbin/service iptables condrestart
/sbin/service sshd condrestart