[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to create a systemd service that interact with nftables service



Greg Wooledge (12023-06-25):
> I think most of the time, this is not done as a systemd service at
> all.  It's usually invoked from the "up" hook when your network interface
> is brought up, assuming you use /etc/network/interfaces.  If you use
> NetworkManager, then I don't know.
> 
> Check interfaces(5) and look for "up", "post-up" and "pre-down".

Linux's firewall is designed so that it can be configured before the
interfaces are up, or even exist. Without that, there would be a short
time with the interface up but no firewall.

Regards,

-- 
  Nicolas George

Attachment: signature.asc
Description: PGP signature


Reply to: