command for flushing ip[6]tables rules

1 files changed, 9 insertions, 1 deletions

diff --git a/awall-cli b/awall-cli
index 8768243..2a4b779 100755
--- a/awall-cli
+++ b/awall-cli
@@ -38,6 +38,12 @@ Run-time activation of new firewall configuration:
     by hitting RETURN within 10 seconds, the configuration is saved to
     the files. Otherwise, the old configuration is restored.
 
+Flush firewall configuration:
+    awall flush
+
+    This command deletes all firewall rules and configures it to drop
+    all packets.
+
 Enable/disable optional policies:
     awall {enable|disable} <policy>...
 
@@ -96,7 +102,7 @@ end
 require 'awall.util'
 util = awall.util
 
-if not util.contains({'translate', 'activate', 'fallback',
+if not util.contains({'translate', 'activate', 'fallback', 'flush',
 		      'enable', 'disable', 'list', 'dump'},
 		     mode) then help() end
 
@@ -222,4 +228,6 @@ elseif mode == 'fallback' then
    io.stderr:write('\nTimeout, reverting to the old configuration\n')
    awall.iptables.revert()
 
+elseif mode == 'flush' then awall.iptables.flush()
+
 else assert(false) end