+ if (family == FW3_FAMILY_V6 && cfg_state->defaults.disable_ipv6)
+ continue;
+
+ if (print_family && family != print_family)
+ continue;
+
+ if (!print_family && family_running(family))
+ {
+ warn("The %s firewall appears to be started already. "
+ "If it is indeed empty, remove the %s file and retry.",
+ fw3_flag_names[family], FW3_STATEFILE);
+
+ continue;
+ }
+
+ for (table = FW3_TABLE_FILTER; table <= FW3_TABLE_RAW; table++)
+ {
+ if (!fw3_has_table(family == FW3_FAMILY_V6, fw3_flag_names[table]))
+ continue;
+
+ if (!(handle = fw3_ipt_open(family, table)))
+ continue;
+
+ info(" * Populating %s %s table",
+ fw3_flag_names[family], fw3_flag_names[table]);
+
+ fw3_print_default_chains(handle, cfg_state, false);
+ fw3_print_zone_chains(handle, cfg_state, false);
+ fw3_print_default_head_rules(handle, cfg_state, false);
+ fw3_print_rules(handle, cfg_state);
+ fw3_print_redirects(handle, cfg_state);
+ fw3_print_forwards(handle, cfg_state);
+ fw3_print_zone_rules(handle, cfg_state, false);
+ fw3_print_default_tail_rules(handle, cfg_state, false);
+
+ if (!print_family)
+ fw3_ipt_commit(handle);
+
+ fw3_ipt_close(handle);
+ }
+
+ if (!print_family)
+ fw3_print_includes(cfg_state, family, false);
+
+ family_set(run_state, family, true);
+ family_set(cfg_state, family, true);
+
+ rv = 0;