#!/bin/sh
SR_Title="RestartFirewall by SR-Software.at";
SR_Version="2026-01-28";

. /opt/SR-Software.at/lib/Default;


SR_PrintAnsi "${ColorInfo}Checking Firewall-Rules\n";
nft -c -f "/etc/Firewall.rules" || exit;


SR_PrintAnsi "${ColorInfo}Saving dynamic NFT-BlockList\n";
for table in ip ip6; do
    if ! [ -d "/mnt/DataDrive/Config/firewall/${table}" ]; then
          mkdir -m 0555 "/mnt/DataDrive/Config/firewall/${table}";
    fi;
    SR_PrintAnsi "${ColorInfo}[${table}]\n";
    for i in $(nft list sets table "${table}" "_${table}_" | grep set | cut -d " " -f 2;); do
        SR_PrintAnsi "${ColorReset} ${i} to ${ColorFileName} /mnt/DataDrive/Config/firewall/${table}/${i}.dynamiclist\n";
        nft list set "${table}" "_${table}_" "${i}" > "/mnt/DataDrive/Config/firewall/${table}/${i}.dynamiclist";
        chmod 0444 "/mnt/DataDrive/Config/firewall/"*"/"*;
    done;
done;


SR_PrintAnsi "${ColorInfo}Reload Firewall\n";
nft flush ruleset;
nft -f "/etc/Firewall.rules";