#!/bin/ash
set -eu

echo "STEP_032B rollback firewall vpn_out integration"

IDX="$(uci show firewall | sed -n "s/^firewall\.@zone\[\([0-9][0-9]*\)\]\.name='vpn_out'/\1/p" | head -n1)"
[ -n "$IDX" ] || { echo "ERROR: vpn_out zone not found"; exit 1; }

for n in vpn3 vpn4 vpn5; do
  while uci -q del_list firewall.@zone[$IDX].network="$n" 2>/dev/null; do
    echo "removed $n"
  done
done

uci commit firewall
/etc/init.d/firewall reload

echo "vpn_out after rollback:"
uci show firewall.@zone[$IDX]