Re: Default Policy = DROP. Help-me

[Yuri Rodrigues <yurirbraz@gmail.com>]

Paolo,

I really disappeared way because I do not know how to do this kind of 
control. I interested by what you said to me.
Can I explain better the funcionalidadae the "&&\" at the end of the lines?

Thank you,

Yuri Rodrigues

Paolo escreveu:
> On Wed, Oct 24, 2007 at 03:57:08PM -0200, Yuri Rodrigues wrote:
>   
> > # Firewall System
> > # Author - Yuri Rodrigues
> > # Mail - yurirbraz@gmail.com
> >     
> ...
>   
> > $iptables -t mangle -P OUTPUT ACCEPT
> > $iptables -t mangle -P INPUT ACCEPT
> > $iptables -t mangle -P POSTROUTING ACCEPT
> > echo "Policing .......................................... [ OK ]"
> >     
> ...
>   
> > modprobe iptable_mangle
> > modprobe iptable_nat
> > echo "0" > /proc/sys/net/ipv4/ip_forward
> > echo "Loading Modules ................................... [ OK ]"
> >     
>
> that's the wrong way of saying 'OK'; you want to say 'OK' if all went really
> ok, else say 'NOK!' and perhaps bailout, ie something like:
>
> ...
> $iptables -t mangle -P OUTPUT ACCEPT &&\
> $iptables -t mangle -P INPUT ACCEPT &&\
> $iptables -t mangle -P POSTROUTING ACCEPT &&\
> echo "Policing .......................................... [ OK ]" || {
>   echo "Something broke in 'Policing'!"
>   exit 1
> }
> ...
> modprobe iptable_mangle  &&\
> modprobe iptable_nat &&\
> echo "0" > /proc/sys/net/ipv4/ip_forward &&\
> echo "Loading Modules ................................... [ OK ]" || {
>   echo "Something broke in 'Modules Loading'!"
>   exit 2
> }
> ...
>
> or set 'set -e' but then your script would just exit on 1st error without
> telling too much.
>
> --
> paolo
>
>
>