Gecko [ op.second-storage.jp ]

Name	Size	Permission	Date
accessdb	12.58 KB	-rwxr-xr-x	2021-10-13 17:25
addgnupghome	3 KB	-rwxr-xr-x	2018-12-11 16:44
addpart	24.86 KB	-rwxr-xr-x	2024-02-09 01:27
adduser	148.16 KB	-rwxr-xr-x	2023-11-21 18:06
agetty	62.38 KB	-rwxr-xr-x	2024-02-09 01:27
alternatives	36.66 KB	-rwxr-xr-x	2023-05-16 01:01
anacron	40.99 KB	-rwxr-xr-x	2023-12-01 00:58
apachectl	4.19 KB	-rwxr-xr-x	2025-07-23 17:44
applygnupgdefaults	2.17 KB	-rwxr-xr-x	2017-12-18 21:28
arp	64.65 KB	-rwxr-xr-x	2021-04-07 12:41
arpd	109.52 KB	-rwxr-xr-x	2024-05-23 13:29
arping	28.75 KB	-rwxr-xr-x	2023-06-13 00:50
atd	32.63 KB	-rwxr-xr-x	2022-09-29 16:47
atrun	67 B	-rwxr-xr-x	2022-09-29 16:47
authdaemond	379 B	-rwxr-xr-x	2022-11-01 13:44
authenumerate	12.26 KB	-rwxr-xr-x	2022-11-01 13:44
authpasswd	12.34 KB	-rwxr-xr-x	2022-11-01 13:44
authtest	16.4 KB	-rwxr-xr-x	2022-11-01 13:44
avcstat	16.39 KB	-rwxr-xr-x	2022-12-13 15:58
biosdecode	21.45 KB	-rwxr-xr-x	2024-05-23 12:42
blkdeactivate	15.97 KB	-r-xr-xr-x	2024-02-03 15:05
blkdiscard	29.05 KB	-rwxr-xr-x	2024-02-09 01:27
blkid	98.66 KB	-rwxr-xr-x	2024-02-09 01:27
blkzone	49.74 KB	-rwxr-xr-x	2024-02-09 01:27
blockdev	41.3 KB	-rwxr-xr-x	2024-02-09 01:27
bridge	158.26 KB	-rwxr-xr-x	2024-05-23 13:29
build-locale-archive	841.02 KB	-rwx------	2024-09-24 18:39
capsh	32.44 KB	-rwxr-xr-x	2024-01-11 03:13
cfdisk	98.4 KB	-rwxr-xr-x	2024-02-09 01:27
chcpu	28.84 KB	-rwxr-xr-x	2024-02-09 01:27
chgpasswd	69.68 KB	-rwxr-xr-x	2023-11-21 18:06
chkconfig	45.05 KB	-rwxr-xr-x	2023-05-16 01:01
chpasswd	61.42 KB	-rwxr-xr-x	2023-11-21 18:06
chroot	41.49 KB	-rwxr-xr-x	2023-01-18 23:52
clamonacc	198.14 KB	-rwxr-xr-x	2023-10-30 01:01
clock	65.22 KB	-rwxr-xr-x	2024-02-09 01:27
clockdiff	20.44 KB	-rwxr-xr-x	2023-06-13 00:50
consoletype	11.85 KB	-rwxr-xr-x	2022-10-02 08:11
courierlogger	25.04 KB	-rwxr-xr-x	2022-11-01 13:44
cracklib-check	12.03 KB	-rwxr-xr-x	2021-04-12 09:53
cracklib-format	251 B	-rwxr-xr-x	2021-04-12 09:53
cracklib-packer	12.04 KB	-rwxr-xr-x	2021-04-12 09:53
cracklib-unpacker	8.03 KB	-rwxr-xr-x	2021-04-12 09:53
create-cracklib-dict	990 B	-rwxr-xr-x	2021-04-12 09:53
crond	73.94 KB	-rwxr-xr-x	2023-12-01 00:58
ctrlaltdel	24.79 KB	-rwxr-xr-x	2024-02-09 01:27
ctstat	25.33 KB	-rwxr-xr-x	2024-05-23 13:29
dcb	155.04 KB	-rwxr-xr-x	2024-05-23 13:29
ddns-confgen	20.46 KB	-rwxr-xr-x	2024-08-19 17:37
delpart	24.86 KB	-rwxr-xr-x	2024-02-09 01:27
depmod	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
devlink	215.86 KB	-rwxr-xr-x	2024-05-23 13:29
dmfilemapd	24.54 KB	-r-xr-xr-x	2024-02-03 15:05
dmidecode	141.81 KB	-rwxr-xr-x	2024-05-23 12:42
dmsetup	158.63 KB	-r-xr-xr-x	2024-02-03 15:05
dmstats	158.63 KB	-r-xr-xr-x	2024-02-03 15:05
dnssec-checkds	936 B	-rwxr-xr-x	2024-08-19 17:37
dnssec-coverage	938 B	-rwxr-xr-x	2024-08-19 17:37
dnssec-dsfromkey	60.84 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-importkey	60.84 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-keyfromlabel	64.76 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-keygen	72.84 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-keymgr	934 B	-rwxr-xr-x	2024-08-19 17:37
dnssec-revoke	56.74 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-settime	60.84 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-signzone	117.2 KB	-rwxr-xr-x	2024-08-19 17:37
dnssec-verify	52.84 KB	-rwxr-xr-x	2024-08-19 17:37
ether-wake	73.94 KB	-rwxr-xr-x	2021-04-07 12:41
ethtool	557.79 KB	-rwxr-xr-x	2022-10-01 01:54
faillock	20.52 KB	-rwxr-xr-x	2024-07-03 05:47
fcgistarter	12.51 KB	-rwxr-xr-x	2025-07-23 17:45
fdformat	33.17 KB	-rwxr-xr-x	2024-02-09 01:27
fdisk	130.92 KB	-rwxr-xr-x	2024-02-09 01:27
findfs	12.37 KB	-rwxr-xr-x	2024-02-09 01:27
fix-info-dir	7.84 KB	-rwxr-xr-x	2022-04-21 00:48
fixfiles	10.48 KB	-rwxr-xr-x	2024-04-17 00:43
fsck	53.47 KB	-rwxr-xr-x	2024-02-09 01:27
fsck.cramfs	41.4 KB	-rwxr-xr-x	2024-02-09 01:27
fsck.minix	98.74 KB	-rwxr-xr-x	2024-02-09 01:27
fsfreeze	16.38 KB	-rwxr-xr-x	2024-02-09 01:27
fstrim	49.6 KB	-rwxr-xr-x	2024-02-09 01:27
ftpscrub	21.87 KB	-rwxr-xr-x	2023-12-15 00:15
ftpshut	12.37 KB	-rwxr-xr-x	2023-12-15 00:15
fuser	38.01 KB	-rwxr-xr-x	2021-04-12 15:57
g13-syshelp	189.71 KB	-rwxr-xr-x	2022-09-13 16:58
genhomedircon	29.27 KB	-rwxr-xr-x	2024-04-17 00:43
genhostid	11.85 KB	-rwxr-xr-x	2022-10-02 08:11
genl	121.41 KB	-rwxr-xr-x	2024-05-23 13:29
genrandom	12.38 KB	-rwxr-xr-x	2024-08-19 17:37
getcap	12.34 KB	-rwxr-xr-x	2024-01-11 03:13
getenforce	7.9 KB	-rwxr-xr-x	2022-12-13 15:58
getpcaps	12.27 KB	-rwxr-xr-x	2024-01-11 03:13
getsebool	11.93 KB	-rwxr-xr-x	2022-12-13 15:58
groupadd	95.34 KB	-rwxr-xr-x	2023-11-21 18:06
groupdel	91.09 KB	-rwxr-xr-x	2023-11-21 18:06
groupmems	61.49 KB	-rwxr-xr-x	2023-11-21 18:06
groupmod	99.37 KB	-rwxr-xr-x	2023-11-21 18:06
grpck	61.48 KB	-rwxr-xr-x	2023-11-21 18:06
grpconv	57.27 KB	-rwxr-xr-x	2023-11-21 18:06
grpunconv	57.25 KB	-rwxr-xr-x	2023-11-21 18:06
halt	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
htcacheclean	32.64 KB	-rwxr-xr-x	2025-07-23 17:45
httpd	570.41 KB	-rwxr-xr-x	2025-07-23 17:45
hwclock	65.22 KB	-rwxr-xr-x	2024-02-09 01:27
iconvconfig	33.05 KB	-rwxr-xr-x	2024-09-24 18:39
ifconfig	80.79 KB	-rwxr-xr-x	2021-04-07 12:41
ifdown	2.07 KB	-rwxr-xr-x	2022-08-10 22:03
ifenslave	24.95 KB	-rwxr-xr-x	2023-06-13 00:50
ifstat	117.68 KB	-rwxr-xr-x	2024-05-23 13:29
ifup	5.33 KB	-rwxr-xr-x	2022-08-10 22:03
in.proftpd	1.17 MB	-rwxr-xr-x	2023-12-15 00:15
init	1.53 MB	-rwxr-xr-x	2024-09-24 18:26
insmod	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
install-info	50.1 KB	-rwxr-xr-x	2022-04-21 00:48
iotop	511 B	-rwxr-xr-x	2024-01-17 01:58
ip	693.3 KB	-rwxr-xr-x	2024-05-23 13:29
ip6tables	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
ip6tables-restore	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
ip6tables-save	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
ipmaddr	20.95 KB	-rwxr-xr-x	2021-04-07 12:41
ipset	8.01 KB	-rwxr-xr-x	2021-04-12 11:54
iptables	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
iptables-apply	3.43 KB	-rwxr-xr-x	2023-07-08 02:04
iptables-restore	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
iptables-save	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
iptunnel	24.94 KB	-rwxr-xr-x	2021-04-07 12:41
isc-hmac-fixup	11.86 KB	-rwxr-xr-x	2024-08-19 17:37
lchage	16.41 KB	-rwxr-xr-x	2024-09-24 18:27
ldattach	32.99 KB	-rwxr-xr-x	2024-02-09 01:27
ldconfig	986.02 KB	-rwxr-xr-x	2024-09-24 18:39
lgroupadd	11.88 KB	-rwxr-xr-x	2024-09-24 18:27
lgroupdel	11.88 KB	-rwxr-xr-x	2024-09-24 18:27
lgroupmod	19.88 KB	-rwxr-xr-x	2024-09-24 18:27
lid	16.27 KB	-rwxr-xr-x	2024-09-24 18:27
lnewusers	19.87 KB	-rwxr-xr-x	2024-09-24 18:27
lnstat	25.33 KB	-rwxr-xr-x	2024-05-23 13:29
load_policy	12.28 KB	-rwxr-xr-x	2024-04-17 00:43
logrotate	92.99 KB	-rwxr-xr-x	2023-02-07 17:19
losetup	90.59 KB	-rwxr-xr-x	2024-02-09 01:27
lpasswd	20.35 KB	-rwxr-xr-x	2024-09-24 18:27
lsmod	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
luseradd	19.88 KB	-rwxr-xr-x	2024-09-24 18:27
luserdel	15.88 KB	-rwxr-xr-x	2024-09-24 18:27
lusermod	19.88 KB	-rwxr-xr-x	2024-09-24 18:27
mariadbd	23.75 MB	-rwxr-xr-x	2023-10-13 00:33
matchpathcon	12.36 KB	-rwxr-xr-x	2022-12-13 15:58
mii-diag	25.4 KB	-rwxr-xr-x	2021-04-07 12:41
mii-tool	21.04 KB	-rwxr-xr-x	2021-04-07 12:41
mkdict	251 B	-rwxr-xr-x	2021-04-12 09:53
mkfs	16.47 KB	-rwxr-xr-x	2024-02-09 01:27
mkfs.cramfs	41.26 KB	-rwxr-xr-x	2024-02-09 01:27
mkfs.minix	86.55 KB	-rwxr-xr-x	2024-02-09 01:27
mkhomedir_helper	24.44 KB	-rwxr-xr-x	2024-07-03 05:47
mkswap	86.47 KB	-rwxr-xr-x	2024-02-09 01:27
modinfo	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
modprobe	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
mysqld	23.75 MB	-rwxr-xr-x	2023-10-13 00:33
named-checkzone	36.63 KB	-rwxr-xr-x	2024-08-19 17:37
named-compilezone	36.63 KB	-rwxr-xr-x	2024-08-19 17:37
nameif	16.92 KB	-rwxr-xr-x	2021-04-07 12:41
newusers	107.23 KB	-rwxr-xr-x	2023-11-21 18:06
nft	24.41 KB	-rwxr-xr-x	2023-11-16 02:58
nginx	1.42 MB	-rwxr-xr-x	2024-11-11 15:25
nginx-debug	1.58 MB	-rwxr-xr-x	2024-11-11 15:25
nologin	11.87 KB	-rwxr-xr-x	2024-02-09 01:27
nsec3hash	12.29 KB	-rwxr-xr-x	2024-08-19 17:37
nstat	113.57 KB	-rwxr-xr-x	2024-05-23 13:29
opendkim	222.48 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-default-keygen	1.4 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-genkey	6.29 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-genzone	83.31 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-reportstats	14.16 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-testkey	83.47 KB	-rwxr-xr-x	2023-04-17 04:11
opendkim-testmsg	16.37 KB	-rwxr-xr-x	2023-04-17 04:11
ownership	12.4 KB	-rwxr-xr-x	2024-05-23 12:42
packer	12.04 KB	-rwxr-xr-x	2021-04-12 09:53
pam_console_apply	45.2 KB	-rwxr-xr-x	2024-07-03 05:47
pam_timestamp_check	11.87 KB	-rwsr-xr-x	2024-07-03 05:47
paperconfig	4.07 KB	-rwxr-xr-x	2021-04-12 12:58
partx	94.5 KB	-rwxr-xr-x	2024-02-09 01:27
pflogsumm	58.47 KB	-rwxr-xr-x	2022-10-28 18:40
pidof	16.56 KB	-rwxr-xr-x	2023-08-16 00:10
ping	66.08 KB	-rwxr-xr-x	2023-06-13 00:50
ping6	66.08 KB	-rwxr-xr-x	2023-06-13 00:50
pivot_root	12.38 KB	-rwxr-xr-x	2024-02-09 01:27
plipconfig	12.66 KB	-rwxr-xr-x	2021-04-07 12:41
pluginviewer	20.57 KB	-rwxr-xr-x	2022-02-24 02:20
postalias	20.41 KB	-rwxr-xr-x	2022-10-28 18:40
postcat	19.94 KB	-rwxr-xr-x	2022-10-28 18:40
postconf	190.95 KB	-rwxr-xr-x	2022-10-28 18:40
postdrop	20.44 KB	-rwxr-sr-x	2022-10-28 18:40
postfix	16.27 KB	-rwxr-xr-x	2022-10-28 18:40
postkick	11.84 KB	-rwxr-xr-x	2022-10-28 18:40
postlock	12.27 KB	-rwxr-xr-x	2022-10-28 18:40
postlog	12.02 KB	-rwxr-xr-x	2022-10-28 18:40
postmap	24.41 KB	-rwxr-xr-x	2022-10-28 18:40
postmulti	28.91 KB	-rwxr-xr-x	2022-10-28 18:40
postqueue	24.47 KB	-rwxr-sr-x	2022-10-28 18:40
postsuper	28.83 KB	-rwxr-xr-x	2022-10-28 18:40
posttls-finger	44.66 KB	-rwxr-xr-x	2022-10-28 18:40
poweroff	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
proftpd	1.17 MB	-rwxr-xr-x	2023-12-15 00:15
pwck	57.27 KB	-rwxr-xr-x	2023-11-21 18:06
pwconv	53.1 KB	-rwxr-xr-x	2023-11-21 18:06
pwhistory_helper	20.43 KB	-rwxr-xr-x	2024-07-03 05:47
pwunconv	53.13 KB	-rwxr-xr-x	2023-11-21 18:06
qshape	12.55 KB	-rwxr-xr-x	2022-10-28 18:40
rdisc	24.55 KB	-rwxr-xr-x	2023-06-13 00:50
rdma	187.38 KB	-rwxr-xr-x	2024-05-23 13:29
readprofile	20.55 KB	-rwxr-xr-x	2024-02-09 01:27
reboot	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
resizepart	41.56 KB	-rwxr-xr-x	2024-02-09 01:27
resolvconf	195.75 KB	-rwxr-xr-x	2024-09-24 18:26
restorecon	20.53 KB	-rwxr-xr-x	2024-04-17 00:43
restorecon_xattr	16.41 KB	-rwxr-xr-x	2024-04-17 00:43
rfkill	53.46 KB	-rwxr-xr-x	2024-02-09 01:27
rmmod	159.95 KB	-rwxr-xr-x	2023-10-25 03:23
rotatelogs	24.56 KB	-rwxr-xr-x	2025-07-23 17:45
route	67.57 KB	-rwxr-xr-x	2021-04-07 12:41
rsyslogd	724.77 KB	-rwxr-xr-x	2023-06-08 07:16
rtacct	46.94 KB	-rwxr-xr-x	2024-05-23 13:29
rtcwake	49.31 KB	-rwxr-xr-x	2024-02-09 01:27
rtmon	117.27 KB	-rwxr-xr-x	2024-05-23 13:29
rtstat	25.33 KB	-rwxr-xr-x	2024-05-23 13:29
runlevel	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
runuser	48.99 KB	-rwxr-xr-x	2024-02-09 01:27
saslauthd	94.42 KB	-rwxr-xr-x	2022-02-24 02:20
sasldblistusers2	20.77 KB	-rwxr-xr-x	2022-02-24 02:20
saslpasswd2	16.42 KB	-rwxr-xr-x	2022-02-24 02:20
sefcontext_compile	65.41 KB	-rwxr-xr-x	2022-12-13 15:58
selabel_digest	12.27 KB	-rwxr-xr-x	2022-12-13 15:58
selabel_lookup	12.27 KB	-rwxr-xr-x	2022-12-13 15:58
selabel_lookup_best_match	11.95 KB	-rwxr-xr-x	2022-12-13 15:58
selabel_partial_match	11.94 KB	-rwxr-xr-x	2022-12-13 15:58
selinux_check_access	12.35 KB	-rwxr-xr-x	2022-12-13 15:58
selinuxconlist	11.93 KB	-rwxr-xr-x	2022-12-13 15:58
selinuxdefcon	11.93 KB	-rwxr-xr-x	2022-12-13 15:58
selinuxenabled	7.89 KB	-rwxr-xr-x	2022-12-13 15:58
selinuxexeccon	11.92 KB	-rwxr-xr-x	2022-12-13 15:58
semodule	29.27 KB	-rwxr-xr-x	2024-04-17 00:43
sendmail	28.47 KB	-rwxr-xr-x	2022-10-28 18:40
sendmail.postfix	28.47 KB	-rwxr-xr-x	2022-10-28 18:40
service	3.64 KB	-rwxr-xr-x	2022-08-10 22:03
sestatus	20.41 KB	-rwxr-xr-x	2024-04-17 00:43
setcap	16.27 KB	-rwx------	2024-01-11 03:13
setenforce	12.26 KB	-rwxr-xr-x	2022-12-13 15:58
setfiles	20.53 KB	-rwxr-xr-x	2024-04-17 00:43
setsebool	16.38 KB	-rwxr-xr-x	2024-04-17 00:43
sfdisk	118.5 KB	-rwxr-xr-x	2024-02-09 01:27
shutdown	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
slattach	43.7 KB	-rwxr-xr-x	2021-04-07 12:41
smtp-sink	33.71 KB	-rwxr-xr-x	2022-10-28 18:40
smtp-source	28.62 KB	-rwxr-xr-x	2022-10-28 18:40
ss	191.3 KB	-rwxr-xr-x	2024-05-23 13:29
sshd	869.66 KB	-rwxr-xr-x	2024-08-14 05:36
sshd-public	869.66 KB	-rwxr-xr-x	2024-08-14 05:36
suexec	20.38 KB	-r-s--s---	2025-07-23 17:45
sulogin	49.24 KB	-rwxr-xr-x	2024-02-09 01:27
swaplabel	16.5 KB	-rwxr-xr-x	2024-02-09 01:27
swapoff	20.74 KB	-rwxr-xr-x	2024-02-09 01:27
swapon	49.4 KB	-rwxr-xr-x	2024-02-09 01:27
switch_root	16.49 KB	-rwxr-xr-x	2024-02-09 01:27
sysctl	28.74 KB	-rwxr-xr-x	2023-08-16 00:10
t1libconfig	3.83 KB	-rwxr-xr-x	2007-12-24 00:49
tc	587.34 KB	-rwxr-xr-x	2024-05-23 13:29
tcsd	309.75 KB	-rwxr-xr-x	2023-11-27 10:38
telinit	218.45 KB	-rwxr-xr-x	2024-09-24 18:26
testsaslauthd	16.66 KB	-rwxr-xr-x	2022-02-24 02:20
tipc	163.07 KB	-rwxr-xr-x	2024-05-23 13:29
tracepath	20.45 KB	-rwxr-xr-x	2023-06-13 00:50
tracepath6	20.45 KB	-rwxr-xr-x	2023-06-13 00:50
tsig-keygen	20.46 KB	-rwxr-xr-x	2024-08-19 17:37
udevadm	424.58 KB	-rwxr-xr-x	2024-09-24 18:26
unbound-anchor	57.33 KB	-rwxr-xr-x	2024-04-12 01:50
unix_chkpwd	36.86 KB	-rwsr-xr-x	2024-07-03 05:47
unix_update	36.85 KB	-rwx------	2024-07-03 05:47
update-alternatives	36.66 KB	-rwxr-xr-x	2023-05-16 01:01
useradd	148.16 KB	-rwxr-xr-x	2023-11-21 18:06
userdel	107.3 KB	-rwxr-xr-x	2023-11-21 18:06
usermod	144.08 KB	-rwxr-xr-x	2023-11-21 18:06
usernetctl	12.4 KB	-rwxr-xr-x	2022-10-02 08:11
vdpa	118.04 KB	-rwxr-xr-x	2024-05-23 13:29
vigr	68.05 KB	-rwxr-xr-x	2023-11-21 18:06
vipw	68.05 KB	-rwxr-xr-x	2023-11-21 18:06
visudo	239.22 KB	-rwxr-xr-x	2025-07-02 03:55
vpddecode	16.47 KB	-rwxr-xr-x	2024-05-23 12:42
weak-modules	33.6 KB	-rwxr-xr-x	2023-10-25 03:23
wipefs	41.11 KB	-rwxr-xr-x	2024-02-09 01:27
xtables-legacy-multi	96.07 KB	-rwxr-xr-x	2023-07-08 02:05
zdump	20.56 KB	-rwxr-xr-x	2024-09-24 18:39
zic	52.82 KB	-rwxr-xr-x	2024-09-24 18:39
zramctl	99.09 KB	-rwxr-xr-x	2024-02-09 01:27

Rename

#!/bin/bash
#
# iptables-apply -- a safer way to update iptables remotely
#
# Copyright © Martin F. Krafft <madduck@madduck.net>
# Released under the terms of the Artistic Licence 2.0
#
set -eu

PROGNAME="${0##*/}";
VERSION=1.0

TIMEOUT=10

function blurb()
{
	cat <<-_eof
	$PROGNAME $VERSION -- a safer way to update iptables remotely
	_eof
}

function copyright()
{
	cat <<-_eof
	$PROGNAME is C Martin F. Krafft <madduck@madduck.net>.

The program has been published under the terms of the Artistic Licence 2.0
	_eof
}

function about()
{
	blurb
	echo
	copyright
}

function usage()
{
	cat <<-_eof
	Usage: $PROGNAME [options] ruleset

The script will try to apply a new ruleset (as output by iptables-save/read
	by iptables-restore) to iptables, then prompt the user whether the changes
	are okay. If the new ruleset cut the existing connection, the user will not
	be able to answer affirmatively. In this case, the script rolls back to the
	previous ruleset.

The following options may be specified, using standard conventions:

-t | --timeout	Specify the timeout in seconds (default: $TIMEOUT)
	-V | --version	Display version information
	-h | --help	Display this help text
	_eof
}

SHORTOPTS="t:Vh";
LONGOPTS="timeout:,version,help";

OPTS=$(getopt -s bash -o "$SHORTOPTS" -l "$LONGOPTS" -n "$PROGNAME" -- "$@") || exit $?
for opt in $OPTS; do
	case "$opt" in
		(-*) unset OPT_STATE;;
		(*)
			case "${OPT_STATE:-}" in
				(SET_TIMEOUT)
					eval TIMEOUT=$opt
					case "$TIMEOUT" in
						([0-9]*) :;;
						(*)
							echo "E: non-numeric timeout value." >&2
							exit 1
							;;
					esac
					;;
			esac
			;;
	esac

case "$opt" in
		(-h|--help) usage >&2; exit 0;;
		(-V|--version) about >&2; exit 0;;
		(-t|--timeout) OPT_STATE=SET_TIMEOUT;;
		(--) break;;
	esac
	shift
done

case "$PROGNAME" in
	(*6*)
		SAVE=ip6tables-save
		RESTORE=ip6tables-restore
		DEFAULT_FILE=/etc/network/ip6tables
		;;
	(*)
		SAVE=iptables-save
		RESTORE=iptables-restore
		DEFAULT_FILE=/etc/network/iptables
		;;
esac

FILE="${1:-$DEFAULT_FILE}";

if [[ -z "$FILE" ]]; then
	echo "E: missing file argument." >&2
	exit 1
fi

if [[ ! -r "$FILE" ]]; then
	echo "E: cannot read $FILE" >&2
	exit 2
fi

COMMANDS=(mktemp "$SAVE" "$RESTORE")

for cmd in "${COMMANDS[@]}"; do
	if ! command -v $cmd >/dev/null; then
		echo "E: command not found: $cmd" >&2
		exit 127
	fi
done

umask 0700

TMPFILE=$(mktemp)
trap "rm -f $TMPFILE" EXIT HUP INT QUIT ILL TRAP ABRT BUS \
		      FPE USR1 SEGV USR2 PIPE ALRM TERM

if ! "$SAVE" >"$TMPFILE"; then
	if ! grep -q ipt /proc/modules 2>/dev/null; then
		echo "E: iptables support lacking from the kernel." >&2
		exit 3
	else
		echo "E: unknown error saving current iptables ruleset." >&2
		exit 4
	fi
fi

[ -x /etc/init.d/fail2ban ] && /etc/init.d/fail2ban stop

echo -n "Applying new ruleset... "
if ! "$RESTORE" <"$FILE"; then
	echo "failed."
	echo "E: unknown error applying new iptables ruleset." >&2
	exit 5
else
	echo "done."
fi

echo -n "Can you establish NEW connections to the machine? (y/N) "

read -n1 -t "${TIMEOUT:-15}" ret 2>&1 || :
case "${ret:-}" in
	(y*|Y*)
		echo
		echo "... then my job is done. See you next time."
		;;
	(*)
		if [[ -z "${ret:-}" ]]; then
			echo "apparently not..."
		else
			echo
		fi
		echo "Timeout. Something happened (or did not). Better play it safe..."
		echo -n "Reverting to old ruleset... "
		"$RESTORE" <"$TMPFILE";
		echo "done."
		exit 255
		;;
esac

[ -x /etc/init.d/fail2ban ] && /etc/init.d/fail2ban start

exit 0

# vim:noet:sw=8