Re: stretch vs iptables auto-start

2020-08-24 Thread Gene Heskett
On Monday 24 August 2020 17:03:13 Andrew Cater wrote: > Start here perhaps? https://wiki.debian.org/nftables > > It should be relatively straightforward to move backward and forwards. > Working as a systemd service means that it will start automatically if > you're using systemd. > > [When in doub

Re: stretch vs iptables auto-start

2020-08-24 Thread Andrew Cater
Start here perhaps? https://wiki.debian.org/nftables It should be relatively straightforward to move backward and forwards. Working as a systemd service means that it will start automatically if you're using systemd. [When in doubt, check the Debian wiki for a topic - if that's no good, have a qu

Re: stretch vs iptables auto-start

2020-08-24 Thread deloptes
Gene Heskett wrote: > At the present time I have around 80 rules, all designed to deny the > network spiders and bots that think they have to mirror my several > giga-byte site, 2 or 3 times a day.  And that was eating up my bandwidth > allocation on a slow net connection. > > Is there a tut some

Re: stretch vs iptables auto-start

2020-08-24 Thread Greg Wooledge
On Sun, Aug 23, 2020 at 02:26:19PM -0400, Gene Heskett wrote: > Since the big conversion of file structs vs who owns what, The what? I can't even parse that. > which > apparently includes running rc.local as the logged in user and not as > root, Now that is pure nonsense. You're just inventi

Re: stretch vs iptables auto-start

2020-08-24 Thread Gene Heskett
On Monday 24 August 2020 04:45:01 Andrei POPESCU wrote: > On Du, 23 aug 20, 21:34:12, Gene Heskett wrote: > > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > My server iptables is inherited from, I think, sarge, so it's > > > probably not done optimally today. It's an init script run from > > >

Re: stretch vs iptables auto-start

2020-08-24 Thread Andrei POPESCU
On Du, 23 aug 20, 21:34:12, Gene Heskett wrote: > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > > My server iptables is inherited from, I think, sarge, so it's probably > > not done optimally today. It's an init script run from /etc/rcS.d. > > Ah,/etc/rcS.d/S18netfilter-persistent > but that

Re: stretch vs iptables auto-start

2020-08-24 Thread Joe
On Sun, 23 Aug 2020 21:34:12 -0400 Gene Heskett wrote: > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > > > My server iptables is inherited from, I think, sarge, so it's > > probably not done optimally today. It's an init script run from > > /etc/rcS.d. > > Ah,/etc/rcS.d/S18netfilter-per

Re: stretch vs iptables auto-start

2020-08-24 Thread Tixy
On Sun, 2020-08-23 at 14:26 -0400, Gene Heskett wrote: > Greetings all; > > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not > as > root, that has hidden the iptables stuff from everybody but root > since > its

Re: stretch vs iptables auto-start

2020-08-23 Thread Gene Heskett
On Sunday 23 August 2020 16:10:10 deloptes wrote: > Hi Gene, > > Gene Heskett wrote: > > Since the big conversion of file structs vs who owns what, which > > apparently includes running rc.local as the logged in user and not > > as root, that has hidden the iptables stuff from everybody but root >

Re: stretch vs iptables auto-start

2020-08-23 Thread Gene Heskett
On Sunday 23 August 2020 15:45:22 Joe wrote: > On Sun, 23 Aug 2020 14:26:19 -0400 > > Gene Heskett wrote: > > Greetings all; > > > > Since the big conversion of file structs vs who owns what, which > > apparently includes running rc.local as the logged in user and not > > as root, that has hidden

Re: stretch vs iptables auto-start

2020-08-23 Thread deloptes
Hi Gene, Gene Heskett wrote: > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not as > root, that has hidden the iptables stuff from everybody but root since > its not now in the users $PATH. > I was running home

Re: stretch vs iptables auto-start

2020-08-23 Thread Joe
On Sun, 23 Aug 2020 14:26:19 -0400 Gene Heskett wrote: > Greetings all; > > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not as > root, that has hidden the iptables stuff from everybody but root > since its no