Automating firewall reload on i/f (ppp) restart
Hi,
on a RH9 machine I have my firewall setup as outline in the IP-Masquerade HOW-TO. My setup is a ppp connection to the Internet and a local ethernet. The masquerading and firewall all work fine.
The one problem I ran into is that I have the ppp connection configured to autmoatically reconnect. When I reconnect and get a new ip address my firewall rules are not automatically flushed and reloaded with the new ip.
To handle this I changed the firewall rules from being loaded at boot time via chkconfig to explicitly called (restart) in /etc/ppp/ip-up.local:
/etc/rc.d/init.d/firewall-2.4 restart
This is the only place it is started. This seems to make the most sense since it will be (re)started whenever my Internet connection comes up. It also works but being relatively new I would like to know if this is an advisable setup? I have searched high and low for anything covering how to flush and restart a firewall when the i/f restarts but all I see is hw to load at boot (via chkconfig or rc.local).
Thanks.
|