Владимир

#!/bin/sh

if [ "$IFACE" = "br0" ]; then
    /sbin/sysctl -w net.bridge.bridge-nf-call-arptables=0
    /sbin/sysctl -w net.bridge.bridge-nf-call-iptables=0
    /sbin/sysctl -w net.bridge.bridge-nf-call-ip6tables=0
fi

# iptables -A INPUT -s первый_ip/32 -p tcp -m tcp --dport 3306 -j ACCEPT
# iptables -A INPUT -s второй_ip/32 -p tcp -m tcp --dport 3306 -j ACCEPT
# iptables -A INPUT -p tcp -m tcp --dport 3306 -j DROP

# update-rc.d mediatimb remove
# update-rc.d mediatimb defaults

start program = "/bin/systemctl start openvpn.service"
stop program = "/bin/systemctl stop openvpn.service"