#!/bin/sh

IPT_LIST="/sbin/iptables /sbin/ip6tables"
MODCHAIN=mod_eth1x_auth

case "$2" in
  AP-STA-CONNECTED)    ACTION=-I ;;
  AP-STA-DISCONNECTED) ACTION=-D ;;
esac

for IT in $IPT_LIST; do
  [ -x $IT ] || continue
  $IT -t mangle $ACTION ${MODCHAIN} -i $1 -m mac --mac-source ${3//-/:} -j RETURN
done
