First version

files/disable_firewall.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+# Turns the contest firewall off (all traffic allowed) for maintenance.
+
+systemctl stop firewall.service
+systemctl disable firewall.service
+
+systemctl stop refresh_rules.service
+systemctl stop refresh_rules.timer
+systemctl disable refresh_rules.service
+systemctl disable refresh_rules.timer
+
+nft flush ruleset
+nft delete table inet filter 2>/dev/null
+
+echo "Firewall disabled. All traffic is now allowed."
+
+# Reset DNS to its default behaviour (systemd-resolved instead of the filter)
+ln -sfn ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
+systemctl restart systemd-resolved