Method removeRulesLocked

platform/linux/nfqueue.go:287–305

removeRulesLocked deletes every rule we successfully added, converting each `-A` into `-D`. Missing rules (already removed) are ignored.

()

// removeRulesLocked deletes every rule we successfully added, converting
// each `-A` into `-D`. Missing rules (already removed) are ignored.
func (b *Backend) removeRulesLocked() error {
	var firstErr error
	// Remove in reverse order.
	for i := len(b.addedRules) - 1; i >= 0; i-- {
		spec := append([]string{}, b.addedRules[i]...)
		for j, s := range spec {
			if s == "-A" {
				spec[j] = "-D"
				break
			}
		}
		if err := runIptables(spec...); err != nil && firstErr == nil {
			// Don't fail hard: rule might already be gone.
			firstErr = fmt.Errorf("iptables delete %v: %w", spec, err)
		}
	}
	b.addedRules = nil
	return firstErr
}

var iptablesPath = func() string {
	if p, err := exec.LookPath("iptables"); err == nil {