if [ "$MODE" == "start" ]; then

	for ifnm in $if_all; do

#		ip4_name=if_${ifnm}_ip4
#		ip4=${!ip4_name}

		ip4list_name=if_${ifnm}_ips4
		ip4list=${!ip4list_name}

#		if [ -z "$ip4list" ]; then
#			ip4list=$ip4
#		fi

		for ip4addr in $ip4list; do
			# filter table
			ipt4 -A INPUT -d $ip4addr
			ipt4 -A OUTPUT -s $ip4addr
		done
	done

fi