Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #208619

Re: How to make networking dependent on firewall configuration?

Show all headers | View raw

	Hi.

On Mon, May 13, 2019 at 02:53:46PM +0300, Martin T wrote:
> Hi,
> 
> I have a /lib/systemd/system/networking.service.d/networking.service.conf
> configuration file which specifies, that my custom iptables.service is
> a requirement for networking.service:
> 
> # systemctl show networking -p Requires
> Requires=system.slice iptables.service
> #
> 
> Is there a better or more correct way to do this?

Yes. Instead of creating this file:

/lib/systemd/system/networking.service.d/networking.service.conf

make this one:

/etc/systemd/system/networking.service.d/networking.service.conf


> Are there any general disadvantages of such approach?

One can specify hostnames in netfilter rules. Trying to load such rules
without a working resolver can lead to weird results.
Any mistake in netfilter rules (iptables.service failing) can prevent
network interfaces from configuring (networking.service).

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to make networking dependent on firewall configuration? Martin T <m4rtntns@gmail.com> - 2019-05-13 14:00 +0200
  Re: How to make networking dependent on firewall configuration? Reco <recoverym4n@enotuniq.net> - 2019-05-13 14:20 +0200
    Re: How to make networking dependent on firewall configuration? Martin T <m4rtntns@gmail.com> - 2019-05-13 14:40 +0200

csiph-web