Re: Package idea, Debian-Firewall.

[Steve Kemp <skx@debian.org>]

On Wed, Oct 13, 2004 at 06:13:36AM +0200, nicklas (smurfd) wrote:

> I have had  a package idea, for a long time now. The idea, was a
> package, containing a "Flush-all" firewall script. Adding this script to
> be ran at bootup. Just for the simplicity. I tend to keep forgetting to
> add it myself.

  I think anybody who knows enough to create a firewall will not
 omit the flushing.

> the postinst file looks like : 
> 
> #!/bin/sh
> set -e
> if [ "$1" = "configure" ]; then
>         ln -s /etc/init.d/debian-firewall /etc/rc0.d/S20debian-firewall
>         ln -s /etc/init.d/debian-firewall /etc/rc1.d/S20debian-firewall
>         ln -s /etc/init.d/debian-firewall /etc/rc2.d/S20debian-firewall

  Noooo!

  Use update-rc.d, please.

  http://www.debian-administration.org/?article=28

> and the prerm file looks like : 
> 
> #!/bin/sh
> set -e
> if [ "$1" = "remove" ]; then
>         rm /etc/rc0.d/S20debian-firewall
>         rm /etc/rc1.d/S20debian-firewall

  Again update-rc.d should be used here.

Steve
--
# The Debian Security Audit Project.
http://www.debian.org/security/audit