[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Iptables the "Debian" way?



In message <38TlZ-1qU-35@gated-at.bofh.it>, Ben Russo <ben@muppethouse.com> writes
I am used to using RedHat, whereby I make sure I have the iptables package installed and I can use "chkconfig" to see if iptables has system-V runtime setup to be on or off, and the iptables-save data goes into /etc/sysconfig/iptables for reload on reboot (or change of SysV init level).

What is the "Debian" way of doing this?

I have to admit this is one of the few mods I make to Debian. I've set up an iptables script which starts, stops, clears and checks status. Iptables is not, of course, a daemon, but start installs rules and enables ip forwarding, stop clears them and disables ip forwarding, clear clears the rules but leaves ip forwarding running (no firewall) and status shows which script (/etc/init.d/iptables.rules by default) has been used to start iptables. There's a small text file placed in /var/run/subsys that stores this.

I would post it, but I'm afraid I nicked the /init.d/functions module from an old LFS to make life easier, and it's quite long.
--
Joe



Reply to: