[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /etc/init.d/iptables

>>>>> Kinglok, FONG <busywater@gmail.com> writes:
>>>>> Jonathan Yu <jonathan.i.yu@gmail.com> wrote:


 > Thank you Jonathan for writing the nice blog article and it works.
 > But it requries some customization in debian Lenny.

 > For some reason, the script in /etc/network/if-pre-up.d/ doesn't load
 > up by default.

	Did you set the execute permission on the script?

# chmod +x /etc/network/if-pre-up.d/SCRIPTNAMEHERE 

 >> I apparently used /etc/network/if-pre-up.d (I can't remember the
 >> reasoning why, but I guess it's useful to make sure you load the
 >> rules prior to bringing the interfaces up, which means the rules
 >> will be there once network connectivity is brought up)

 > You have to explicitly call it from /etc/network/interfaces like:

 > auto eth0
 > iface eth0 inet static
 >         pre-up /etc/network/if-pre-up.d/iptables

	It somewhat defeats its advantage of /not/ having it mentioned
	for each of the host's interfaces.

auto eth0 eth1 ...
iface eth0 inet static
    pre-up /etc/network/if-pre-up.d/iptables
iface eth1 inet static
    pre-up /etc/network/if-pre-up.d/iptables


FSF associate member #7257

Reply to: