#!/bin/sh

local ql_cust_firewall_config=$(uci get ql_cust_config.@qcmap_configs[0].firewall_config)

has_zone() {
	fw4 -q network "$INTERFACE" >/dev/null && return 0
	eval $(ubus call "network.interface.$INTERFACE" status | jsonfilter -e 'ZONE=@.data.zone')
	fw4 -q zone "$ZONE" >/dev/null
}

[ "$ACTION" = ifup -o "$ACTION" = ifupdate ] || exit 0
[ "$ACTION" = ifupdate -a -z "$IFUPDATE_ADDRESSES" -a -z "$IFUPDATE_DATA" ] && exit 0

/etc/init.d/firewall enabled || exit 0

has_zone || exit 0

if [ $ql_cust_firewall_config -eq 1 ]; then
	logger -t firewall "Reloading firewall due to $ACTION of $INTERFACE ($DEVICE)"
	fw4 -q reload
else
	logger -t firewall "Do Not Reloading firewall due to $ACTION of $INTERFACE ($DEVICE)"
fi

