Re: stretch vs iptables auto-start

2020-08-24 Thread Gene Heskett
On Monday 24 August 2020 17:03:13 Andrew Cater wrote: > Start here perhaps? https://wiki.debian.org/nftables > > It should be relatively straightforward to move backward and forwards. > Working as a systemd service means that it will start automatically if > you're using systemd. > > [When in doub

Re: stretch vs iptables auto-start

2020-08-24 Thread Andrew Cater
Start here perhaps? https://wiki.debian.org/nftables It should be relatively straightforward to move backward and forwards. Working as a systemd service means that it will start automatically if you're using systemd. [When in doubt, check the Debian wiki for a topic - if that's no good, have a qu

Re: stretch vs iptables auto-start

2020-08-24 Thread deloptes
Gene Heskett wrote: > At the present time I have around 80 rules, all designed to deny the > network spiders and bots that think they have to mirror my several > giga-byte site, 2 or 3 times a day.  And that was eating up my bandwidth > allocation on a slow net connection. > > Is there a tut some

Re: stretch vs iptables auto-start

2020-08-24 Thread Greg Wooledge
On Sun, Aug 23, 2020 at 02:26:19PM -0400, Gene Heskett wrote: > Since the big conversion of file structs vs who owns what, The what? I can't even parse that. > which > apparently includes running rc.local as the logged in user and not as > root, Now that is pure nonsense. You're just inventi

Re: stretch vs iptables auto-start

2020-08-24 Thread Gene Heskett
On Monday 24 August 2020 04:45:01 Andrei POPESCU wrote: > On Du, 23 aug 20, 21:34:12, Gene Heskett wrote: > > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > My server iptables is inherited from, I think, sarge, so it's > > > probably not done optimally today. It's an init script run from > > >

Re: stretch vs iptables auto-start

2020-08-24 Thread Andrei POPESCU
On Du, 23 aug 20, 21:34:12, Gene Heskett wrote: > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > > My server iptables is inherited from, I think, sarge, so it's probably > > not done optimally today. It's an init script run from /etc/rcS.d. > > Ah,/etc/rcS.d/S18netfilter-persistent > but that

Re: stretch vs iptables auto-start

2020-08-24 Thread Joe
On Sun, 23 Aug 2020 21:34:12 -0400 Gene Heskett wrote: > On Sunday 23 August 2020 15:45:22 Joe wrote: > > > > > My server iptables is inherited from, I think, sarge, so it's > > probably not done optimally today. It's an init script run from > > /etc/rcS.d. > > Ah,/etc/rcS.d/S18netfilter-per

Re: stretch vs iptables auto-start

2020-08-24 Thread Tixy
On Sun, 2020-08-23 at 14:26 -0400, Gene Heskett wrote: > Greetings all; > > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not > as > root, that has hidden the iptables stuff from everybody but root > since > its

Re: stretch vs iptables auto-start

2020-08-23 Thread Gene Heskett
On Sunday 23 August 2020 16:10:10 deloptes wrote: > Hi Gene, > > Gene Heskett wrote: > > Since the big conversion of file structs vs who owns what, which > > apparently includes running rc.local as the logged in user and not > > as root, that has hidden the iptables stuff from everybody but root >

Re: stretch vs iptables auto-start

2020-08-23 Thread Gene Heskett
On Sunday 23 August 2020 15:45:22 Joe wrote: > On Sun, 23 Aug 2020 14:26:19 -0400 > > Gene Heskett wrote: > > Greetings all; > > > > Since the big conversion of file structs vs who owns what, which > > apparently includes running rc.local as the logged in user and not > > as root, that has hidden

Re: stretch vs iptables auto-start

2020-08-23 Thread deloptes
Hi Gene, Gene Heskett wrote: > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not as > root, that has hidden the iptables stuff from everybody but root since > its not now in the users $PATH. > I was running home

Re: stretch vs iptables auto-start

2020-08-23 Thread Joe
On Sun, 23 Aug 2020 14:26:19 -0400 Gene Heskett wrote: > Greetings all; > > Since the big conversion of file structs vs who owns what, which > apparently includes running rc.local as the logged in user and not as > root, that has hidden the iptables stuff from everybody but root > since its no

stretch vs iptables auto-start

2020-08-23 Thread Gene Heskett
Greetings all; Since the big conversion of file structs vs who owns what, which apparently includes running rc.local as the logged in user and not as root, that has hidden the iptables stuff from everybody but root since its not now in the users $PATH. So what is the best way to assure this st