#!/bin/sh

set -e

# Manage debconf state before the config script re-runs and postinst
# consumes the answers (LP: #2129024)
if [ -e /usr/share/debconf/confmodule ]; then
    . /usr/share/debconf/confmodule

    if [ "$1" = "install" ]; then
        # New install, or reinstall after remove: any debconf answers
        # present were provided by the admin (eg preseeding). Let them win
        # over leftover state and let postinst process the allowed ports
        # questions again.
        db_fset ufw/existing_configuration seen false 2>/dev/null || true
    elif [ "$1" = "upgrade" ] && [ -f /etc/ufw/ufw.conf ]; then
        # Keep the debconf database in sync with the state on disk (the
        # admin may have run 'ufw enable/disable' since the last install)
        # so postinst does not flip the firewall state on upgrade.
        if grep -qE '^ENABLED=yes$' /etc/ufw/ufw.conf ; then
            db_set ufw/enable true || true
        else
            db_set ufw/enable false || true
        fi
    fi
fi

if [ "$1" = "upgrade" ] && [ -f /etc/ufw/ufw.conf ]; then
    if dpkg --compare-versions "$2" lt 0.29.1-1 ; then
        level=`grep '^LOGLEVEL=.*' /etc/ufw/ufw.conf | cut -f 2 -d '=' | tr A-Z a-z`
        if [ -z "$level" ]; then
            # Convert old-style logging mechanism to the new. This is
            # primarly useful for Ubuntu 8.04 LTS to Ubuntu 10.04 LTS
            # upgrades, but also will cover some other odd situations.
            if grep -q '^\-A ufw-after-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "\[UFW BLOCK INPUT\]: "$' /etc/ufw/after.rules ; then
                level="low"
            else
                level="off"
            fi
            echo "# AUTOMATICALLY ADDED ON UPGRADE:" >> /etc/ufw/ufw.conf
            echo "# set to one of 'off', 'low', 'medium', 'high'" >> /etc/ufw/ufw.conf
            echo "LOGLEVEL=$level" >> /etc/ufw/ufw.conf
        fi
    fi
fi

# Automatically added by dh_installdeb/14.3
dpkg-maintscript-helper rm_conffile /etc/init/ufw.conf 0.35-5\~ ufw -- "$@"
dpkg-maintscript-helper rm_conffile /etc/bash_completion.d/ufw 0.34-1\~ ufw -- "$@"
# End automatically added section
# Automatically added by dh_installinit/14.3
if [ "$1" = "install" ] && [ -n "$2" ] && [ -e "/etc/init.d/ufw" ] ; then
	chmod +x "/etc/init.d/ufw" >/dev/null || true
fi
# End automatically added section