#!/bin/sh
# Do IP mangling for checksum error issue after disable_dgaf=1
+iptables -D POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill
iptables -A POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill
# block everything except ssh, icmp, http, and dhcp