+ else
+ warn "iptables executable not available"
+ fi
+}
+
+function stopIptables
+{
+ if [[ $IPTABLES_SNAT_ != "true" ]]; then
+ return
+ fi
+ if [ -x $(command -v iptables) ] ; then
+ if [[ $NAT_INTERFACE_ != "" ]]; then
+ local nat_source_ip_=`netGetIp "$NAT_INTERFACE_" warn`
+
+ if iptables -t nat -vnL POSTROUTING | grep -q "SNAT.*${NAT_INTERFACE_}.*to:${nat_source_ip_}" ; then
+ iptables -t nat -F POSTROUTING &>/dev/null && \
+ iptables -t nat -D POSTROUTING -o "$NAT_INTERFACE_" -j SNAT --to-source "$nat_source_ip_"
+ fi
+ echo 0 > /proc/sys/net/ipv4/ip_forward
+ fi
+ fi