shell

    l3filter_num=`iptables -L -t filter  --line  | grep -A 10 "FORWARD" | grep "L3FILTER" | cut -c 1-3 `  

    echo "$SH_NAME l3filter_num:$l3filter_num"  > /dev/kmsg

    if [ "$l3filter_num" != "" ] && [ "$l3filter_num" != " " ] && [ "$l3filter_num" != "Cha" ]; then
        echo "$SH_NAME apply rule -D -I"  > /dev/kmsg
        $IPTABLES -D FORWARD $l3filter_num
        $IPTABLES -I FORWARD $l3filter_num -j L3FILTER
    else
        echo "$SH_NAME apply rule -A"  > /dev/kmsg
        $IPTABLES -A FORWARD -j L3FILTER
    fi