ifup??

yenonn · 11-16-2005, 02:08 AM

hi,

i want to load some iptables rules dynamically when ppp0 is up(which is connected to the internet). what is the script triggering the ppp0? /etc/sysconfig/network-script/ifup? i tried it but, it shows no response. (FYI, i am using FC2). thanks

Ygrex · 11-16-2005, 03:55 AM

No, use /etc/ppp/ip-up.local and create it with execution permissions if it does not exist.

yenonn · 11-16-2005, 06:09 PM

hey, wait a minute, i dun have the /etc/ppp/ip-up.local file??? can u please explain in more details? thanks

Ygrex · 11-16-2005, 06:23 PM

The only file you should have is /etc/ppp/ip-up. It is an executable script which runs whenever a new ppp interface is being up. Some part of this script checks for the file /etc/ppp/ip-up.local. If it exist and has execution permissions, ip-up will run it as well. Probably, it works not on all distros, but RH, as I think, cannot do not have it

Indeed you can write all you need in tag of ip-up but it is not right, this script will be replaced with a new one on package updating.

yenonn · 11-16-2005, 06:41 PM

so,
i have to create a /etc/ppp/ip-up.local file

cp ~/firewall-rules /etc/ppp/ip-up.local
chmod +x /etc/ppp/ip-up.local

i have to put all my iptables rules to /etc/ppp/ip-up.local?

it will load dynamically after ppp0 is established, or after it is redailed for making another new connection?

am i right??? thanks

Ygrex · 11-16-2005, 06:56 PM

Yes, you are completely right.

Quote:

Originally posted by yenonn
it will load dynamically after ppp0 is established, or after it is redailed for making another new connection?

I do not understand the question. The script will be run whenever ppp0 appear in the ifconfig's output

yenonn · 11-16-2005, 07:07 PM

i have a ppp0, and i want to apply firewall script, but then, the ppp0 will not permenantly grabing an ip for a long period. it will somehow reconnect the link to make a new connection and having another new ip. but, my firewall script needs to grab the ip dynamically (to sense the public ip address) and load it after it make a new connection. my intention is to make a dynamic firewall rules against the ppp0.

Ygrex · 11-16-2005, 07:15 PM

ip-up script exports variables like PPP_REMOTE and PPP_LOCAL. If they should be changed (on reconnection, as you said), this script will be rerun.

yenonn · 11-16-2005, 07:20 PM

thanks..... i like it very much.....

btw, do we need to learn shell script in order to understand what is the script is talking about???

Ygrex · 11-16-2005, 07:41 PM

Quote:

Originally posted by yenonn
btw, do we need to learn shell script in order to understand what is the script is talking about???

Is it a question?