Re: Where to put firewall command for stratup at boot?

On Sunday, March 25, 2012 21:12 Alan Hicks wrote:

> On Mon, 26 Mar 2012 08:37:18 +0700
> 
> Willy Sudiarto Raharjo <[email protected]> wrote:
> > Yes, it's the perfect place where you should the command to be
> > executed at startup
> 
> In this case, no it's not.
> 
> I'm assuming that shorewall is writing your netfilter/iptables ruleset
> and loading all relevant modules. In that case the proper thing to do
> is place that in rc.firewall. That will ensure the kernel firewall is
> activated properly before any network services start.
> 
> Putting it in rc.local probably won't harm anything, but it does leave
> you without a firewall for some indefinite period while the system is
> booting.

  Okay. Thanks guys. Putting it in rc.firewall seems to make just slightly more sense, so 
I'll set it there and see what happens.


-- 
All that is necessary for the triumph of evil is that good men do nothing.  -Edmund Burke