#!/usr/bin/env bash
set -euo pipefail

iptables -C INPUT -s 10.77.0.150 -j ai-sandbox-input 2>/dev/null \
  || iptables -I INPUT 1 -s 10.77.0.150 -j ai-sandbox-input

iptables -C FORWARD -s 10.77.0.150 -j ai-sandbox-forward 2>/dev/null \
  || iptables -I FORWARD 1 -s 10.77.0.150 -j ai-sandbox-forward