Re: [gentoo-user] Re: iptables wiki

["Richard Fish" <bigfish@asmallpond.org>]

On 7/5/06, James <wireless@tampabay.rr.com> wrote:
> or I've seen this:
> #!/sbin/runscript

This is only for init scripts in /etc/init.d/.  So no, don't use
this...use #!/bin/bash instead.

> /usr/local/bin/ might be appropriate too?

Yeah, that would work also...

>
> So my (edited) scipt  issues new iptables commands
> and the gentoo script converts these commands
> into rulesets and stores them in /var/lib/iptables/rules-save?

Yep.

> 4. run "/etc/init.d/iptables save" convert (new) script based
>    commands into rulesets and load .
> 5. Test the (new) scipt {rulesets}.
> 6. Go to step 3 and repeat until a wonderful firewall results.
>
> Note, step 4 can be added to the end of my-firewall.sh to
> combine steps 3 and 4?

If you like.  But in fact step 4 can be moved to step 7 (er, step 6
once you renumber stuff), since you don't really need to save anything
until you are happy with the results.

-Richard
-- 
gentoo-user@gentoo.org mailing list