Re: Firewall/init scripts problem

2003-03-17 Thread Jamin Collins
On Mon, Mar 17, 2003 at 02:17:38PM +0100, Aaron Isotton wrote: > On Mon, 2003-03-17 at 05:05, Jamin W. Collins wrote: > > > Is there something particular that you dislike about this method? > > Or, is it in some way lacking? > > What I liked about using iptables-save and iptables-restore is that

Re: Firewall/init scripts problem

2003-03-17 Thread Aaron Isotton
On Mon, 2003-03-17 at 05:05, Jamin W. Collins wrote: > On Mon, Mar 17, 2003 at 01:21:08AM +0100, Aaron Isotton wrote: > > On Sun, 2003-03-16 at 16:03, Jamin W. Collins wrote: > > > > > Ditch the idea of iptable-save and iptables-restore. Create your > > > script in such a way that it flushes all

Re: Firewall/init scripts problem

2003-03-16 Thread Jamin W. Collins
On Mon, Mar 17, 2003 at 01:21:08AM +0100, Aaron Isotton wrote: > On Sun, 2003-03-16 at 16:03, Jamin W. Collins wrote: > > > Ditch the idea of iptable-save and iptables-restore. Create your > > script in such a way that it flushes all existing rules on startup > > and then builds all needed rules.

Re: Firewall/init scripts problem

2003-03-16 Thread Aaron Isotton
On Sun, 2003-03-16 at 16:03, Jamin W. Collins wrote: > On Sun, Mar 16, 2003 at 03:05:07PM +0100, Aaron Isotton wrote: > > > I use a shell script in /etc/init.d to configure my firewall > > (iptables). Currently, it works as follows: > > > > - if it is called with "start", it checks for the exis

Re: Firewall/init scripts problem

2003-03-16 Thread Aaron Isotton
On Sun, 2003-03-16 at 16:06, [EMAIL PROTECTED] wrote: > On 16 Mar 2003 15:05:07 +0100 > Aaron Isotton <[EMAIL PROTECTED]> wrote: > > > > > My problem is: where should $STORAGE_FILE go? > > I vote for a directory called /etc/iptables. No, that's a bad idea. Only configuration files should go

Re: Firewall/init scripts problem

2003-03-16 Thread ronin2
On 16 Mar 2003 15:05:07 +0100 Aaron Isotton <[EMAIL PROTECTED]> wrote: > > My problem is: where should $STORAGE_FILE go? I vote for a directory called /etc/iptables. > > - I'd like to bring up the firewall before the network interfaces; > these are brought up in /etc/rcS.d/S39ifupdown; thus i

Re: Firewall/init scripts problem

2003-03-16 Thread Jamin W. Collins
On Sun, Mar 16, 2003 at 03:05:07PM +0100, Aaron Isotton wrote: > I use a shell script in /etc/init.d to configure my firewall > (iptables). Currently, it works as follows: > > - if it is called with "start", it checks for the existence of > $STORAGE_FILE; if it exists, it exists saying that the