44net-request(a)hamradio.ucsd.edu wrote:
Subject:
Re: [44net] ampr-ripd 1.12 released
From:
"SP2L-wp" <sp2l(a)wp.pl>
Date:
11/17/2014 08:02 AM
To:
AMPRNet working group <44net(a)hamradio.ucsd.edu>
Rob, Marius et al.
WOW!!!
What a nifty script!
Isn't small mistype here:
while read d ip <--- "d" is it correct?
do
Hi Tom,
Yes, it is correct. It reads the output of the diff command which has lines like:
< 1.2.3.4
5.6.7.9
It puts the < or > into $d and the IP address into $ip.
Then it either deletes or inserts the IP address in the list using the case/esac on $d.
You can copy/paste the script and run it and check using:
iptables -L ipipfilter -vn
to see if it works OK. You can run it again and nothing should change. When all is OK
you can change the ampr-ripd startup to add the -x option and modify the firewall to use
ipipfilter instead of ACCEPT for -p 4.
Make sure in the startup sequence of the system you run the script once before the
firewall is loaded, so that the ipipfilter target does exist before the rule for -p 4 is
loaded.
I have my own script that sets up the entire firewall, so I call the script from there.
Rob