#! /bin/bash

#This gives time to the Dockernet to configure the network namespace of the container
sleep 3

echo "Ubuntu started"
echo "start ovs"
service openvswitch-switch start

NAME='fw'

#echo "setup ovs bridge"
ovs-vsctl add-br $NAME
#ovs-vsctl set bridge $NAME datapath_type=netdev
ovs-vsctl set bridge $NAME protocols=OpenFlow10,OpenFlow12,OpenFlow13
#ovs-vsctl set-fail-mode $NAME secure
#ovs-vsctl set bridge $NAME other_config:disable-in-band=true

ovs-vsctl add-port $NAME ${NAME}-eth0

#send out through same interface, on single port
ovs-ofctl add-flow $NAME 'in_port=1,action=in_port'

# iptables -I FORWARD -m physdev --physdev-in eth0 --physdev-out eth1 -d 8.8.8.8 -j DROP

echo "Firewall started"