Re: Where to put iptables script

[Saku Ytti <saku-debian-security@ytti.fi>]

On Wed, Jul 04, 2001 at 10:02:49AM +0200, Giacomo Mulas wrote:
> On Tue, 3 Jul 2001, Warren Turkal wrote:
> 
> > Where should I put the iptables script that runs when starting my
> > computer?
> 
> It is very much your choice. I can tell you what I chose: I put the script
> itself in /etc/init.d and made a soft link to it in /etc/rcS.d, making
> sure that, in the boot process, it will be run before any network
> interface is brought up.

/etc/network/interfaces has 'pre-up' which is per interface basis keyword
use to run script before interface is brought up. I'd suggest using
it to block all, and then after interface is brought up allow what you need,
this way you can use FQDN in firewall script.


-- 
	ytti