#! /nix/store/l0wlqpbsvh1pgvhcdhw7qkka3d31si7k-bash-5.1-p8/bin/bash -e
# Helper command to manipulate both the IPv4 and IPv6 tables.
ip46tables() {
  iptables -w "$@"
  ip6tables -w "$@"

}


# Create a unique drop rule
ip46tables -D INPUT -j nixos-drop 2>/dev/null || true
ip46tables -F nixos-drop 2>/dev/null || true
ip46tables -X nixos-drop 2>/dev/null || true
ip46tables -N nixos-drop
ip46tables -A nixos-drop -j DROP

# Don't allow traffic to leak out until the script has completed
ip46tables -A INPUT -j nixos-drop



if /nix/store/lrm1xssv7ap0qgbq7jxn1frdmqds54d7-firewall-start/bin/firewall-start; then
  ip46tables -D INPUT -j nixos-drop 2>/dev/null || true
else
  echo "Failed to reload firewall... Stopping"
  /nix/store/crlya2f3yb7ry040rsp5zlfdfyir15xm-firewall-stop/bin/firewall-stop
  exit 1
fi

