:: Re: [DNG] Starting shorewall.
Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Didier Kryn
Ημερομηνία:  
Προς: dng@lists.dyne.org
Αντικείμενο: Re: [DNG] Starting shorewall.
Le 24/11/2025 à 13:27, Peter via Dng a écrit :
> Daedalus with sysvinit is working here. Shorewall is installed and can
> be started interactively. I want shorewall to start automatically.


    I understand it is necessary to restore the netfilter config at
every start-up. But isn't it possible to do it through iptables?

    I ask this because I've read that shorewall is a configuration
tool, just like iptables, but higher level, and, furthermore, shorewall
uses iptables to communicate the configuration to netfilter. Therefore
it would be enough to isue a simple iptables command to restore the
configuration, and keep shorewall to create/modify it.

    I think the package iptables-persistent would do it for you, with
an rc script which would be called before starting services like ssh.

    Then shorewall could remain what it is intended for: a higher-level
configuration UI than raw iptables. In no way a server.

--     Didier