#!/bin/sh
# After interface address changes, flush NAT conntrack so port forwards
# to a new LAN host apply without reboot (complements firewall.init).

[ "$ACTION" = ifup -o "$ACTION" = ifupdate ] || exit 0
[ -n "$IFUPDATE_ADDRESSES" ] || exit 0

logger -t ltrx-firewall-nat "Address $ACTION on $INTERFACE ($DEVICE) — flush NAT conntrack"

if [ -x /usr/sbin/ltrx_flush_nat_state ]; then
	/usr/sbin/ltrx_flush_nat_state
elif [ -e /proc/net/nf_conntrack ]; then
	echo f > /proc/net/nf_conntrack 2>/dev/null
fi
