#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |
#local network="${net}"
local network="$( iptoolsGetIps | $cmdTr -s '[[:blank:]]' ';' );"
#local network="${ip}/32;"
#local network="${ip}/32;127.0.1.1/32"

#				-- CLIENT --
#local clients="$clients|UDP	;domain		;root/root"

#				-- SERVER --
#local servers="$servers|TCP	;ssh		;root/root"

# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -s ${ip}/32 -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -d ${ip}/32 -j ""$rulesIn""
# ruleEthOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesEthOut""
# ruleEthIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesEthIn""

local  ruleIn="$ruleIn ;vxlan_in	|-p udp --dport 4789"
local ruleOut="$ruleOut;vxlan_out	|-p udp --dport 4789"
local ruleOut="$ruleOut;vxlan_out	|-p udp --sport 4789"
local  ruleIn="$ruleIn ;vxlan_in	|-p udp --sport 4789"