where to insert firewall rules?

kpachopoulos · 04-07-2007, 11:48 AM

Hi,
using the old style -following a tutorial- i inserted them in /var/lib/iptables/active and also using the /etc/init.d/iptables script. Where are they supposed to be placed (in releases >= Etch)?

Thanks

richinsc · 04-10-2007, 09:01 PM

I insert my iptables script in /etc/network/if-up/.. You just have to make sure that you put a number in front of file name. I name mine 00-firewall. This makes it so that as soon as Ethernet interfaces come up the firewall goes active rather then waiting for everything else to load.

This path is specific to Debian for me.. Don't know about other distros.

oldlucky · 04-11-2007, 02:28 AM

Quote:

Originally Posted by nocturna_gr

Hi,
using the old style -following a tutorial- i inserted them in /var/lib/iptables/active and also using the /etc/init.d/iptables script. Where are they supposed to be placed (in releases >= Etch)?

Thanks

1. First create your firewall script then put it in the /etc/init.d folder (i name mine firewall-script.sh)

2. Then make it executable by typing the following in a terminal as root

chmod +x /etc/init.d/firewall-script.sh

then change directory

cd /etc/rcS.d/

3.Then create a smlink

ln -s /etc/init.d/firewall-script.sh S99-firewall-script.sh

Thats it, should work now when you start your computer.

cheers