You are not logged in.
Pages: 1
I want to copy my script for setting up my firewall with iptables to my arch system, except, where do I put it? I was looking around, and I figure I should create my own initscript, call it iptables, and have it do its stuff in there. What do you think?
Is there a better or more elegant solution?
I'm new here, so, hello.
Offline
Personally, I've done a script with iptables and put a line in /etc/rc.local to execute it.
You can do an initscript too if you want but it takes more time to do it.
Offline
Yeah, I could do that, but I don't mind doing the extra work if the result is more elegant. I was also trying to avoid doing just what you did.
Offline
pacman -Sy iptables
write your firewall config script. run it.
check your rules.
then. /etc/rc.d/iptables save
the table definitions are saved in the /etc/iptables folder by the way.
put iptables in your DAEMONS array, right before network, and you are golden.
on startup, iptables "daemon" simply loads the saved tables definition..
"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍
Offline
Thanks, I did that, but I modified the initscript so it runs my own script instead of just loading the saved rules. Just saving the rules would work, except I already have a script that sets it up, and that script has about ten of echo 1 > /proc/foo/bar/bas
Offline
mine does too, but I use the sysctl.conf file to set those subsequently.
/me shrugs
one less thing to do on my own, and since sysctl gets run anyway...
a place for everything, and everything in its place.
"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍
Offline
Pages: 1