#!/usr/bin/env bash

firewallCmd="firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0"

# Define function to check whether firewalld is present and started and apply firewall rules for grid nodes
setFirewall ()
{
	if [[ "$(type firewall-cmd &>/dev/null; echo $?)" -eq 0 && "$(systemctl is-active firewalld)" == "active" ]]
	then
	    for port in s d
	    do
	        ${firewallCmd} -p tcp -m multiport --${port}ports 11211:11220,47500:47509,47100:47109 -j ACCEPT &>/dev/null
	        ${firewallCmd} -p udp -m multiport --${port}ports 47400:47409 -j ACCEPT &>/dev/null
	    done
	    ${firewallCmd} -m pkttype --pkt-type multicast -j ACCEPT &>/dev/null

	    systemctl restart firewalld
	fi
}

case $1 in
	start)
		/usr/share/#name#/bin/ignite.sh /etc/#name#/$2 & echo $! >> /var/run/#name#/$2.pid
		;;
	set-firewall)
		setFirewall
		;;
esac