allow for non-existent ipset configuration fragment

1 files changed, 9 insertions, 7 deletions

diff --git a/awall/init.lua b/awall/init.lua
index 450a03e..3d67630 100644
--- a/awall/init.lua
+++ b/awall/init.lua
@@ -120,13 +120,15 @@ function translate()
 
    awall.iptables.dump(testmode and 'output' or '/etc/iptables')
 
-   ipsfile = io.output(testmode and 'output/ipset' or '/etc/ipset.d/awall')
-   for name, params in pairs(config.ipset) do
-      if not params.type then error('Type not defined for set '..name) end
-      local line = 'create '..name..' '..params.type
-      if params.family then line = line..' family '..params.family end
-      ipsfile:write(line..'\n')
+   if config.ipset then
+      ipsfile = io.output(testmode and 'output/ipset' or '/etc/ipset.d/awall')
+      for name, params in pairs(config.ipset) do
+	 if not params.type then error('Type not defined for set '..name) end
+	 local line = 'create '..name..' '..params.type
+	 if params.family then line = line..' family '..params.family end
+	 ipsfile:write(line..'\n')
+      end
+      ipsfile:close()
    end
-   ipsfile:close()
 
 end