diff --git a/install.sh b/install.sh new file mode 100644 index 0000000..5960f51 --- /dev/null +++ b/install.sh @@ -0,0 +1,25 @@ +#!/bin/bash + +echo "Installing iptables..." +zypper -y install iptables iptables-nft-backend + +echo "Setting up the init files..." +mkdir -p /usr/libexec/iptables +curl -O --output-dir /usr/libexec/iptables https://git.xo.nl/marcel/iptables/raw/master/libexec/iptables.init +curl -O --output-dir /usr/libexec/iptables https://git.xo.nl/marcel/iptables/raw/master/libexec/ip6tables.init +chown root:root /usr/libexec/iptables/* +chmod ug+x /usr/libexec/iptables/* + +echo "Setting up the systemd files..." +curl -O --output-dir /etc/systemd/system https://git.xo.nl/marcel/iptables/raw/master/systemd/iptables.service +curl -O --output-dir /etc/systemd/system https://git.xo.nl/marcel/iptables/raw/master/systemd/ip6tables.service + +echo "Setting up the default firewall configuration..." +curl -O --output-dir /etc/sysconfig https://git.xo.nl/marcel/iptables/raw/config/iptables +curl -O --output-dir /etc/sysconfig https://git.xo.nl/marcel/iptables/raw/config/ip6tables + +echo "Enabling iptables on next boot +systemctl daemon-relad +systemctl enable iptables ip6tables + +echo "All done, please ensure the firewall settings are to your liking before rebooting"