/sbin/uruk-save is in uruk 20131213-1.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 | #!/bin/sh
# uruk-save - directly dump /etc/uruk/rc to an iptables-save style
# file, without invoking iptables
# this file maintained at http://git.mdcc.cx/uruk.git
# Copyright © 2005 Joost van Baal
# Copyright © 2012 Wessel Dankers
#
# This file is part of Uruk. Uruk is free software; you can redistribute
# it and/or modify it under the terms of the GNU GPL, see the file named
# COPYING.
echo -n "# Generated by uruk-save on "
date
echo
export uruk_save_dir=$(mktemp -d)
trap 'rm -rf -- "$uruk_save_dir"' EXIT INT HUP QUIT TERM
echo "*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]" >$uruk_save_dir/filter
echo "*raw
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]" >$uruk_save_dir/raw
echo "*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]" >$uruk_save_dir/mangle
if test "$1" = "-6"
then
URUK_IPTABLES=: URUK_IP6TABLES=uruk_save uruk
else
echo "*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]" >$uruk_save_dir/nat
URUK_IPTABLES=uruk_save URUK_IP6TABLES=: uruk
fi
for f in $uruk_save_dir/*
do
cat $f
echo COMMIT
echo
done
echo -n "# Completed on "
date
|