#!/bin/sh
### BEGIN INIT INFO
# Provides:          surfShark_iptables
# Required-Start:
# Required-Stop:
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: surfShark_iptables
# Description:
### END INIT INFO

case "$1" in
    start)
        echo "Set - IPtables"
        iptables -F

        iptables -P INPUT ACCEPT
        iptables -P FORWARD DROP
        iptables -P OUTPUT DROP

        iptables -A OUTPUT -o lo -j ACCEPT

        iptables -A OUTPUT -o tun+ -j ACCEPT

        iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
        iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT

        iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
        iptables -A OUTPUT -p tcp -o eth+ -m multiport --dports 22,53,1443 -m state --state NEW -j ACCEPT
        iptables -A OUTPUT -p udp -o eth+ -m multiport --dports 22,53,1194 -m state --state NEW -j ACCEPT

        iptables -A OUTPUT -p tcp -o wlan+ -m multiport --dports 22,53,1443 -m state --state NEW -j ACCEPT
        iptables -A OUTPUT -p udp -o wlan+ -m multiport --dports 22,53,1194 -m state --state NEW -j ACCEPT
        ;;

    stop)
        echo "Set - IPtables - Default"
		iptables -F
		iptables -P INPUT ACCEPT
        iptables -P OUTPUT ACCEPT
        iptables -P FORWARD ACCEPT
        ;;
	*)
		echo "(start|stop)"
		;;
esac

exit 0