router: add update_z-i-stop.sh

router/switch_to_yota.sh

@@ -6,7 +6,7 @@ sysctl net.ipv4.ip_default_ttl=65
 # TODO: disable default route, DNS
 ifup enp0s18f2u4
 
-HOST01PROV=85.235.198.26
+HOST01PROV=85.235.192.189
 #YOTAUSB=192.168.48.254
 # see INET_IP_YOTA in /etc/rc.d/rc.firewall
 # route

router/update_z-i-stop.sh

+#!/bin/sh -x
+
+SETNAME=rkz
+IFACE=vmbr0
+# hash:ip
+IPSTYPE=hash:net
+
+iptables -t mangle -D PREROUTING -i $IFACE -m set --match-set $SETNAME dst -j MARK --set-mark 5
+
+# something like clean
+ipset -exist destroy $SETNAME.tmp
+ipset -exist destroy $SETNAME
+