.\" Copyright (c) 2023 Joost van Baal-Ilić <joostvb-uruk@mdcc\&.cx>
.TH "uruk-save" 8 "9 окт 2023" "uruk-save 20231009" "SYSTEM ADMINISTRATION "
.po 2m
.de ZI
.\" Zoem Indent/Itemize macro I.
.br
'in +\\$1
.nr xa 0
.nr xa -\\$1
.nr xb \\$1
.nr xb -\\w'\\$2'
\h'|\\n(xau'\\$2\h'\\n(xbu'\\
..
.de ZJ
.br
.\" Zoem Indent/Itemize macro II.
'in +\\$1
'in +\\$2
.nr xa 0
.nr xa -\\$2
.nr xa -\\w'\\$3'
.nr xb \\$2
\h'|\\n(xau'\\$3\h'\\n(xbu'\\
..
.if n .ll -2m
.am SH
.ie n .in 4m
.el .in 8m
..
.SH NAME
uruk-save \- save uruk rc configuration in iptables-save-style format
.SH SYNOPSIS

\fBuruk-save\fP \fB[\fP-6\fB]\fP
.SH OPTIONS

.ZI 2m "-6"
\&
.br
Don\&'t save iptables rules but save
ip6tables rules, for IPv6 filtering\&.
.in -2m
.SH DESCRIPTION
\fBuruk-save\fP saves the IPv4 rules (for all of the filter, raw, mangle and nat
tables) in \fC/etc/uruk/rc\fP in \fBiptables-save(5)\fP-style format, without invoking
\fBiptables(8)\fP\&. If the \fB-6\fP option is given, the IPv6 rules (if any) in
\fC/etc/uruk/rc\fP are saved, in \fBip6tables-save(5)\fP-style format\&. It prints output
to stdout; suggested invocation therefore is

.di ZV
.in 0
.nf \fC
 # uruk-save > /var/lib/uruk/iptables/active
.fi \fR
.in
.di
.ne \n(dnu
.nf \fC
.ZV
.fi \fR

or

.di ZV
.in 0
.nf \fC
 # uruk-save -6 > /var/lib/uruk/ip6tables/active
.fi \fR
.in
.di
.ne \n(dnu
.nf \fC
.ZV
.fi \fR

\&. This script is useful if you don\&'t like the default behaviour of the uruk
init script, and would like it to load the current uruk rc file instead of the
current active file\&. Please note: generally you don\&'t need to invoke this
script manually: the script \fBurukctl\fP which comes with uruk is suitable for most
cases, it invokes \fBuruk-save\fP if needed\&.
.SH WARNING
Just as \fBuruk\fP, in order to keep the \fBuruk-save\fP script small and simple, the
script does very little error handling\&. It does not check the contents of the
\fIrc\fP file in any way before executing it\&. When your \fIrc\fP file contains bogus
stuff, \fBuruk-save\fP will very likely behave in unexpected ways\&. Caveat emptor\&.

Things will likely break if you do very fancy stuff in an \fIrc\fP hook file\&. If
your \fIrc\fP file is in verbose mode (i\&.e\&. it features \fCset -x\fP) or in no-act
mode (i\&.e\&. it features a hardcoded \fCiptables=\&'echo iptables\&'\fP), \fBuruk-save\fP
fails\&.
.SH SEE ALSO
\fBuruk(8)\fP, \fBuruk-rc(5)\fP \&.
.SH COPYRIGHT
Copyright (C) 2005, 2007, 2010, 2011, 2012, 2013 Joost van Baal-Ilić <joostvb-uruk@mdcc\&.cx>

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version\&.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE\&. See the
GNU General Public License for more details\&.

You should have received a copy of the GNU General Public License along
with this program\&. If not, see http://www\&.gnu\&.org/licenses/\&.
.SH AUTHOR
Joost van Baal-Ilić <joostvb-uruk@mdcc\&.cx>