From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Kihis-00048i-6J for garchives@archives.gentoo.org; Thu, 25 Sep 2008 03:40:58 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 4710BE062D; Thu, 25 Sep 2008 03:40:57 +0000 (UTC) Received: from killerapps.info (killerapps.info [217.115.203.170]) by pigeon.gentoo.org (Postfix) with ESMTP id 21E70E062D for ; Thu, 25 Sep 2008 03:40:57 +0000 (UTC) Received: from henkie1.student.utwente.nl ([130.89.171.83]) by killerapps.info with esmtpa (Exim 4.68) (envelope-from ) id 1Kihip-00018V-C9 for gentoo-server@lists.gentoo.org; Thu, 25 Sep 2008 05:40:55 +0200 Message-ID: <48DB08BE.2010402@killerapps.info> Date: Thu, 25 Sep 2008 05:42:54 +0200 From: Leon Schoorl User-Agent: Thunderbird 2.0.0.16 (X11/20080725) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@lists.gentoo.org Reply-to: gentoo-server@lists.gentoo.org MIME-Version: 1.0 To: gentoo-server@lists.gentoo.org Subject: Re: [gentoo-server] eth0 startup References: <20080924190642.T60035@shell.bway.net> In-Reply-To: <20080924190642.T60035@shell.bway.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -4.4 (----) X-Archives-Salt: 1532da1e-fce6-426c-b002-299e8f5c108d X-Archives-Hash: 2eedf8003f7b63648c608d2bb2a02cd8 Ajai Khattri schreef: > > I have iptables and net.eth0 in my default runlevel - is it normal for > iptables to start *before* eth0 is up? If not, then why is this > happening? I think it's for security reasons. If eth0 goes up first and the iptables some (short) time after that. Then in that (short) time some, perhaps malicious, could come in. Which should be blocked be some iptable rules, that still have to be loaded. That time should be pretty short, but better safe then sorry, so iptables is started first. Regards, Leon