Greetings,

I'm running Ubuntu 6.06LTS Server (command-line based, no GUI) and wish to configure IPtables. I have my script written and saved in a text file. At this point, I'm confused about several things. I've searched google and unfortunately have not found a clear explanation to my questions.

1.) How do I automatically execute the script at bootup?
--Do I need to change the file extension of the text file?
--Do I have to add "#!/bin/bash" to the top of the script?
--Where do I place the script, in the /etc/init.d directory?
--What permissions does the script need to run at bootup?

2.) Some IPtables scripts I've come across include the following:

modprobe ip_tables
modprobe ip_conntrack_ftp

My Ubuntu server is not providing FTP, just HTTP and SSH, so do I need to include these lines of code in my IPtables script?

Thank you for your time,

*Nick*

1.) How do I automatically execute the script at bootup?
Not sure where it can go on Ubuntu distros.

--Do I need to change the file extension of the text file?
No file extension needed. Adding .sh sort of identies it easier when ls listing files. It does need to be set with the execution permissions.
chmod -x name_of_script

--Do I have to add "#!/bin/bash" to the top of the script?
Yes it will need to be there for a bash script.

--Where do I place the script, in the /etc/init.d directory?
Look at other scripts in this section and find one that is quite simply. Edit it to use your script. Then you need to links of the script in /etc/rc3.d, rc4.d, rc5.d. A soft link to the one in /etc/init.d but rename the beginning to S99name_of_script. This means Start and will be the last thing to start. K is for Kill. Read up on Runlevels to see what the differences are.

--What permissions does the script need to run at bootup?
If listed like above then nothing needed. Best root owns it.

modprobe ip_tables
modprobe ip_conntrack_ftp
Not needed usually. Thay load once the iptable command is called ususally. But it does not hurt to add to the script.

My Ubuntu server is not providing FTP, just HTTP and SSH, so do I need to include these lines of code in my IPtables script?
If not needing any open ports then the a line that says everything closed should do the trick.

Brian