Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #226463

Re: stretch vs iptables auto-start

Show all headers | View raw

On Sun, 23 Aug 2020 21:34:12 -0400
Gene Heskett <gheskett@shentel.net> wrote:

> On Sunday 23 August 2020 15:45:22 Joe wrote:
> 

> >
> > My server iptables is inherited from, I think, sarge, so it's
> > probably not done optimally today. It's an init script run from
> > /etc/rcS.d.  
> 
> Ah,/etc/rcS.d/S18netfilter-persistent
> but that does not mention iptables anyplace in it.  Whats the diff?
> 

Not quite. I have a pseudo-daemon script (lifted from Linux From
Scratch, before the auto-builds happened) that accepts a filename, so I
can have a couple of sets of rules, plus a status command to tell me
which is currently installed, and flush and stop commands to clear the
rules or to stop everything. 

My server only ever needs one set, but my netbook boots up into
suitable rules for public wifi, and I run a different set on a trusted
LAN. The netbook doesn't use my old daemon script, but uses
iptables-persistent and I just run other rulesets manually when needed.

-- 
Joe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-23 20:30 +0200
  Re: stretch vs iptables auto-start Joe <joe@jretrading.com> - 2020-08-23 21:50 +0200
    Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 03:40 +0200
      Re: stretch vs iptables auto-start Joe <joe@jretrading.com> - 2020-08-24 10:30 +0200
      Re: stretch vs iptables auto-start Andrei POPESCU <andreimpopescu@gmail.com> - 2020-08-24 10:50 +0200
        Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 11:30 +0200
  Re: stretch vs iptables auto-start deloptes <deloptes@gmail.com> - 2020-08-23 22:20 +0200
    Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-24 03:50 +0200
      Re: stretch vs iptables auto-start deloptes <deloptes@gmail.com> - 2020-08-24 22:20 +0200
        Re: stretch vs iptables auto-start Andrew Cater <amacater@gmail.com> - 2020-08-24 23:10 +0200
          Re: stretch vs iptables auto-start Gene Heskett <gheskett@shentel.net> - 2020-08-25 01:10 +0200
  Re: stretch vs iptables auto-start Tixy <tixy@yxit.co.uk> - 2020-08-24 09:50 +0200
  Re: stretch vs iptables auto-start Greg Wooledge <wooledg@eeg.ccf.org> - 2020-08-24 14:30 +0200

csiph-web