Re: some reality about iptables, please

[Dave Carrigan <dave@rudedog.org>]

On Tue, Aug 26, 2003 at 09:12:15PM -0400, Bret Comstock Waldow wrote:
> I can find all the sites and advice I want about how to form iptables
> rules, but I can't find any decent discussion of how to enable the damn
> things.

For network interfaces, I usually stick it as a pre-up item in the
/etc/network/interfaces file:

 iface eth1 inet static
   address xxx
   netmask xxx
   network xxx
   broadcast xxx
   gateway xxx
   pre-up /etc/firewall/iptables.eth1 start
   post-down /etc/firewall/iptables.eth1 start

For PPP connections, stick a script in the /etc/ppp/ip-up.d directory.

-- 
Dave Carrigan
Seattle, WA, USA
dave@rudedog.org | http://www.rudedog.org/ | ICQ:161669680
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-C++-DNS-PalmOS-PostgreSQL-MySQL