[gentoo-user] Re: launching iptables

[James]

Alexander Kirillov <nevis2us <at> infoline.su> writes:


> > Is their a way to get 'rc-update add <my_firewall>  default' to launch
> > my_firewall without putting it in the /etc/init.d/ dir and using the
> > runscipt template for my script?

> > thoughts, suggestions and examples are most welcome.
> Keep your script in /etc and run it once.

OK, but how will it get discovered again upon reboot?

/etc/init.d/iptables will overwrite what my_firewall.sh does.
as it is currently doing....


> If you have SAVE_ON_STOP="yes" in /etc/conf.d/iptables
> your rules will be restored whenever you restart iptables.

Um, maybe I missing something but searching for "SAVE_ON"
only reveals this line in the /etc/init.d/iptables script:


stop() {
        if [[ ${SAVE_ON_STOP} == "yes" ]] ; then
                save || return 1
        fi


it looks for this setting in my script?  If not, what file do 
I set the param  ${SAVE_ON_STOP}  in?


I.E. this is a conditional statement testing the setting which is 
where?

Or do I just add this line to the end for the scipt?

confused.

James






-- 
gentoo-user@g.o mailing list