#!/usr/bin/bash

readonly OVPN_ARP_CHAIN="ovpn_INPUT"
readonly OVPN_PREROUTING_CHAIN="ovpn_PREROUTING"

function ifaces_all() {
    ifconfig -s | grep --invert-match -w Iface | awk '{print $1}' | grep --invert-match -w lo
}

function ifaces_tun() {
    ifaces_all | grep tun
}

#
#	Collect information
#
TUN_IFACES=$(ifaces_tun)

#
#	Clean and delete OVPN chain
#
if [ z"${TUN_IFACES}" == z"" ]; then
    #
    #	Clean ARP rules
    #
    arptables -D INPUT -j ${OVPN_ARP_CHAIN}
    arptables -F ${OVPN_ARP_CHAIN}
    arptables -X ${OVPN_ARP_CHAIN}
    
    #
    #	Clean RAW::PREROUTING rules
    #
    iptables -t raw -D PREROUTING -j ${OVPN_PREROUTING_CHAIN}
    iptables -t raw -F ${OVPN_PREROUTING_CHAIN}
    iptables -t raw -X ${OVPN_PREROUTING_CHAIN}
fi
