#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
#local network="$( iptoolsGetIps | $cmdTr -s '[[:blank:]]' ';' );"
local network="${ip}/32;"
#local network="${ip}/32;127.0.1.1/32"

# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |

# DNS and DNS RPC
#				-- CLIENT --
local clients="$clients|TCP	;953"
#				-- SERVER --
local servers="$servers|TCP	;953"

#local  ruleEthIn="$ruleEthIn ;dnsRNDC_in	| -s "$ip" -d "$ip" -p udp -m owner --uid-owner 1000 --gid-owner 1000"
#local ruleEthOut="$ruleEthOut;dnsRNDC_out	| -d "$ip" -s "$ip" -p udp -m owner --uid-owner 1000 --gid-owner 1000"
#local  ruleEthIn="$ruleEthIn ;dnsRNDC_in	| -s "$ip" -d "$ip" -p udp -m owner --uid-owner 0 --gid-owner 0"
#local ruleEthOut="$ruleEthOut;dnsRNDC_out	| -d "$ip" -s "$ip" -p udp -m owner --uid-owner 0 --gid-owner 0"
local  ruleEthIn="$ruleEthIn ;dnsRNDC_in	| -s "$ip" -d "$ip" -p udp"
local ruleEthOut="$ruleEthOut;dnsRNDC_out	| -d "$ip" -s "$ip" -p udp"