Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #226454

Re: stretch vs iptables auto-start

Show all headers | View raw

Hi Gene,

Gene Heskett wrote:

> Since the big conversion of file structs vs who owns what, which
> apparently includes running rc.local as the logged in user and not as
> root, that has hidden the iptables stuff from everybody but root since
> its not now in the users $PATH.
> 

I was running home brew iptables firewall until couple of months ago. It was
time to upgrade since iptables is getting replaced by net filter
(nftables). It was obvious that at some point an upgrade is inevitable.

After researching some options I picked up shorewall and I am very happy
with it.

My requirement was to be able to easily configure and maintain a firewall
with at least 3 (three) network cards Internet, Intranet and DMZ.
Accent put on easy to configure - and I must admit the shorewall thing is
amazing.

> So what is the best way to assure this stuff gets started during a reboot
> or restart of X? Stuff that s/b running regardless of any X restarts
> until the next full reboot?  Stretch, uptodate plus tde here.

I don't know if it suits your needs - you might be looking for a desktop
firewall, which I do not need and thus don't know ... but keep in mind that
at some point in the future nftables will be the king.

regards

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-23 20:30 +0200
  Re: stretch vs iptables auto-start Joe <joe@jretrading.com> - 2020-08-23 21:50 +0200
    Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 03:40 +0200
      Re: stretch vs iptables auto-start Joe <joe@jretrading.com> - 2020-08-24 10:30 +0200
      Re: stretch vs iptables auto-start Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-24 10:50 +0200
        Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 11:30 +0200
  Re: stretch vs iptables auto-start deloptes <deloptes@gmail.com> - 2020-08-23 22:20 +0200
    Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 03:50 +0200
      Re: stretch vs iptables auto-start deloptes <deloptes@gmail.com> - 2020-08-24 22:20 +0200
        Re: stretch vs iptables auto-start Andrew Cater <amacater@gmail.com> - 2020-08-24 23:10 +0200
          Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-25 01:10 +0200
  Re: stretch vs iptables auto-start Tixy <tixy@yxit.co.uk> - 2020-08-24 09:50 +0200
  Re: stretch vs iptables auto-start Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-24 14:30 +0200

csiph-web