#!/bin/bash
# See: http://linux.overshoot.tv/wiki/server/setting_your_first_firewall_ssh
# reset.fw - Reset firewall
# set x to 0 - No reset
# set x to 1 - Reset firewall
# ---------------------------------------------------------------------------------------------------------------
# Added support for IPV6 Firewall
# ---------------------------------------------------------------------------------------------------------------
# Written by Vivek Gite <vivek@nixcraft.com>
# Source: http://www.cyberciti.biz/faq/turn-on-turn-off-firewall-in-linux/
# ---------------------------------------------------------------------------------------------------------------
# You can copy / paste / redistribute this script under GPL version 2.0 or above
# =============================================================
x=1
 
# set to true if it is CentOS / RHEL / Fedora box
RHEL=false

### no need to edit below  ###
IPT=/sbin/iptables
IPT6=/sbin/ip6tables

if [ "$x" == "1" ];
then
  if [ "$RHEL" == "true" ];
  then
    # reset firewall using redhat script
    /etc/init.d/iptables stop
    /etc/init.d/ip6tables stop
  else
    # for all other Linux distro use following rules to reset firewall

    ### reset ipv4 iptales ###
    $IPT -P INPUT ACCEPT
    $IPT -P OUTPUT ACCEPT
    $IPT -P FORWARD ACCEPT
    $IPT -F
    $IPT -X
    $IPT -Z
    for table in $(</proc/net/ip_tables_names)
    do
      $IPT -t $table -F
      $IPT -t $table -X
      $IPT -t $table -Z
    done

    ### reset ipv6 iptales ###
    $IPT6 -P INPUT ACCEPT
    $IPT6 -P OUTPUT ACCEPT
    $IPT6 -P FORWARD ACCEPT
    $IPT6 -F
    $IPT6 -X
    $IPT6 -Z
    for table in $(</proc/net/ip6_tables_names)
    do
      $IPT6 -t $table -F
      $IPT6 -t $table -X
      $IPT6 -t $table -Z
    done
  fi
else
  :
fi