#!/bin/bash
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:$PATH

if [ $# -lt 2 ]; then 
    echo "Usage: firewall.sh clear/open/isopen"
    exit -1 
fi

case $1 in 
    "open" )
        if [ $# -eq 2 ]; then 
            iptables -I INPUT -p tcp --dport $2 -j ACCEPT
        elif [ $# -eq 3 ];then
            iplist=${3//,/ }
            for ip in $iplist 
            do      
                iptables -I INPUT -s $ip -p tcp --dport $2 -j ACCEPT
            done    
        fi;;    
    "clear" )
        iptables -S| grep "dport $2" | while read cmd
        do      
            iptables -D ${cmd:2}
        done;;  
    "isopen" )
        iptables -nvL | grep "tcp dpt:${2}"
        exit $?;;
    * )
        exit -1 
esac
exit 0