#!/bin/sh

DEVICE=${DEVICE:-$(/sbin/uci -p /var/state get network."$INTERFACE".ifname)}

case "$ACTION" in
    ifup)
        if [ "$INTERFACE" = "lan" ]; then
            /usr/sbin/shorewall start
	elif [ "${INTERFACE:0:3}" = "wan" ] &&
             [ "${INTERFACE:$((${#INTERFACE}-2)):2}" != "_6" ]; then
	    /etc/shorewall/state/firewall enable "$DEVICE"
	fi
        ;;
    ifdown)
	if [ "${INTERFACE:0:3}" = "wan" ]; then
	    /etc/shorewall/state/firewall disable "$DEVICE"
	fi
        ;;
esac