PATH=/sbin:/usr/sbin:/bin:/usr/bin
[ "$ACTION" = "ifup" ] && {
	. /etc/functions.sh
	. /lib/fon/config.sh
	
	/usr/sbin/iptables -L -n 2>&- | grep WAN_HOOK >&- 2>&- || {
		sleep 10
		# to avoid race conditions
		/usr/sbin/iptables -L -n 2>&- | grep WAN_HOOK >&- 2>&- || /usr/sbin/iptables -N WAN_HOOK 2>&- >&- 
	}

	/usr/sbin/iptables -F WAN_HOOK
	
	/sbin/route -n | grep "$wan_ifname" | awk '($3 != "0.0.0.0") { print $1 "/" $3 }' | \
		xargs -r -n1 /usr/sbin/iptables -I WAN_HOOK -o "$wan_ifname" -j DROP -d
}
