Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 10910] firewall/iptables init scripts should start before network

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 10910] firewall/iptables init scripts should start before network
  • Date: 10 Apr 2006 16:41:08 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=10910





------- Additional Comments From jblosser-smgl AT firinn.org 2006-04-10 11:41
-------
These are all the iptables frontends/wrappers I can find with init scripts:

shorewall : PROGRAM is /sbin/shorewall, uses a which function to find
iptables
firehol : self-contained in the init script, uses a which function to find
iptables
agt : wants /usr/sbin/agt, which on first glance appears to just run
'iptables' without a path specifier at all
sm-firewall : wants /usr/sbin/iptables

shorewall and firehol are fine as they are. agt could be patched to figure
out
what path iptables is in on build and default its install to the same location
(/sbin or /usr/sbin). Then the init script would need to be adjusted during
the
build to point to the right location (do we have other examples of init
scripts
for movable binaries? ssh supports CONFIG_LOC so maybe this is a global
issue).

sm-firewall could also detect the location on build... right now it's getting
the init script from the downloaded source and installing it without asking so
it's not exactly inside spec anyway (firehol does the same thing BTW).

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




Archive powered by MHonArc 2.6.24.

Top of Page