#!/bin/sh

set -e

# Can be dropped in Trixie
if update-alternatives --query iptables.service 2>/dev/null; then
    update-alternatives --remove-all iptables.service
fi

# Source debconf library
. /usr/share/debconf/confmodule

case "$1" in
configure)
    db_get iptables-persistent/autosave_done || true
    if [ "x$RET" != "xtrue" ]; then
        db_get iptables-persistent/autosave_v4 || true
        if [ "x$RET" = "xtrue" ]; then
	    if which iptables > /dev/null ; then
		if iptables -t filter -L -n > /dev/null; then
		    iptables-save > /etc/iptables/rules.v4
		else
                    echo "IPv4: Unable to save (table filter isn't available or module not loadable)"
		fi
	    else
                echo "IPv4: Can't find iptables in $PATH, please check your system"
            fi
        fi
        db_get iptables-persistent/autosave_v6 || true
        if [ "x$RET" = "xtrue" ]; then
	    if which ip6tables > /dev/null ; then
		if ip6tables -t filter -L -n > /dev/null; then
		    ip6tables-save > /etc/iptables/rules.v6
		else
                    echo "IPv6: Unable to save (table filter isn't available or module not loadable)"
		fi
	    else
                echo "IPv6: Can't find ip6tables in $PATH, please check your system"
            fi
        fi

        db_set iptables-persistent/autosave_done true || true
    fi

    update-rc.d iptables-persistent remove
;;
esac

if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
    # Ensure the drop-in is loaded
    if [ -d /run/systemd/system ]; then
        systemctl --system daemon-reload >/dev/null || true
    fi
fi

# Automatically added by dh_installdeb/13.11.4ubuntu3
dpkg-maintscript-helper rm_conffile /etc/systemd/system/netfilter-persistent.service.d/iptables.conf -- "$@"
# End automatically added section