[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Default Policy = DROP. Help-me



On 2007-10-25 Paolo wrote:
> On Thu, Oct 25, 2007 at 02:10:43PM +0200, Ansgar -59cobalt- Wiechers wrote:
>>> $iptables -t mangle -P POSTROUTING ACCEPT &&\
>>> echo "Policing .......................................... [ OK ]" || {
>>>   echo "Something broke in 'Policing'!"
>>>   exit 1
>>> }
>> 
>> You don't want to do that, because the term in curled braces is
>> executed when *any* of the previous commands fails (including the
>> echo). Better use something like this:
> 
> well, if 'echo' fails, you're really in troubles and need to fix
> something else before running the fw.

True. However, that doesn't change anything at all about the (false)
assumptions the construct is based upon. I presented a better approach
and susggest to use that one instead.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html



Reply to: