Re: [rock-user] Firewall Rules and System Startup

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bernd Petrovitsch wrote:
> On Sun, 2005-11-06 at 19:43 +0100, Benjamin Schieder wrote:
> [...]
> 
>>Bernd Petrovitsch wrote:
>>
>>>How and where is one supposed to put the firewall rules into?
>>>
>>>In theory I want:
>>>1) configure interfaces, but do not `ip set link eth<x> up` them.
>>>2) possibly add and/or delete routes
>>>3) add firewall rules
>>>4) ip set link eth<x> up
>>>
>>For 2) there's only a 'default route' possibility in yet.
>>4) is done automatically when adding the interface.
> 
> 
> Yes, that's the problem.
> 
> While I'm on it: I have an openvpn tunnel. Do I configure the thing in
> stone as a normale device (with name tap1) and how?

I have no experience with openvpn tunnels. In theory, you should be able to do
it this way. Just add another interface section. Here's what I do for my DSL
connection on ppp0:

interface ppp0
        ppp eth0
        pppoe options
        ppp_defaults
        ppp_option user "me"
        ppp_option password "secret"
        clamp_mtu
        masquerade

Greetings,
	Benjamin

- --
Go away, or I will replace you with a very small shellscript!
	http://shellscripts.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFDblJbr0OTeImXvg8RAi+9AJ0bWSPlzYbhI1VInxv6wSfnGswumgCgywNw
Pxz2yTo3CdnLZRvPWAGk04M=
=lmO/
-----END PGP SIGNATURE-----