#!/bin/sh
#-----------------------------------
#	iptables moniter
#-----------------------------------

IPT_ENABLE=1
IPT_DELAY=10
IPTABLES=/usr/local/sbin/iptables
FIREWALL=/etc/rc.d/init.d/firewall


while [ $IPT_ENABLE -eq 1 ]
do
	# if network is activated
	if [ -f /var/lock/subsys/network ]; then

		# if ip_forward is disabled
		IP_FORWORD=`cat /proc/sys/net/ipv4/ip_forward`
		if [ $IP_FORWORD -eq 1 ]; then
			# get accept tables
			IPT_FORWARD=`$IPTABLES -L FORWARD | grep -c ACCEPT`

			if [ $IPT_FORWARD -eq 0 ]; then
				$FIREWALL restart >/dev/null 2>&1
				IPT_DELAY=10
			else
				IPT_DELAY=30
			fi
		fi

	else
		IPT_DELAY=5
	fi
	/bin/sleep $IPT_DELAY
done

exit 0
