{
$OUT .=<<"HERE";

# This will flush any existing rules for coova-chilli
stopChilli()\{
    CHAIN='IN_FROM_CHILLI'
    STATE=\$(/sbin/iptables -L -n | grep -c \$CHAIN)
    if [ \$STATE -ge 1 ]; then
        /sbin/iptables -D INPUT -i $tundev -j \$CHAIN
        /sbin/iptables -F \$CHAIN
        /sbin/iptables -X \$CHAIN
    fi
    CHAIN='OUT_TO_CHILLI'
    STATE=\$(/sbin/iptables -L -n | grep -c \$CHAIN)
    if [ \$STATE -ge 1 ]; then
        /sbin/iptables -D OUTPUT -o $tundev -j \$CHAIN
        /sbin/iptables -F \$CHAIN
        /sbin/iptables -X \$CHAIN
    fi
    CHAIN='FORWARD_FROM_CHILLI'
    STATE=\$(/sbin/iptables -L -n | grep -c \$CHAIN)
    if [ \$STATE -ge 1 ]; then
        /sbin/iptables -D FORWARD -i $tundev -j \$CHAIN
        /sbin/iptables -F \$CHAIN
        /sbin/iptables -X \$CHAIN
    fi
    CHAIN='FORWARD_TO_CHILLI'
    STATE=\$(/sbin/iptables -L -n | grep -c \$CHAIN)
    if [ \$STATE -ge 1 ]; then
        /sbin/iptables -D FORWARD -o $tundev -j \$CHAIN
        /sbin/iptables -F \$CHAIN
        /sbin/iptables -X \$CHAIN
    fi
    CHAIN='PREROUTING_FROM_CHILLI'
    STATE=\$(/sbin/iptables -t nat -L -n | grep -c \$CHAIN)
    if [ \$STATE -ge 1 ]; then
        /sbin/iptables -D PREROUTING -t nat -i $tundev -j \$CHAIN
        /sbin/iptables -t nat -F \$CHAIN
        /sbin/iptables -t nat -X \$CHAIN
    fi
\}
HERE
}
