Re: Preferred way of preserving firewall rules on system reboots?

[Aleksandar Milivojevic <amilivojevic@pbl.ca>]

Cedric Blancher wrote:
> Le jeu 13/05/2004 à 16:48, Aleksandar Milivojevic a écrit :
> 
>>What is your preferred way of preserving firewall configuration on 
>>firewall reboots?  I know this is probably distribution specific.
> 
> 
> Every time I need to save the ruleset :
> 
> 	iptables-save > /etc/firewall
> 
> Then, in a startup script (/etc/init.d/networking on my Debian), I add :
> 
> 	iptables-restore < /etc/firewall

This is something what Red Hat's init.d script is doing (if called with 
"save").  However, using this approach, there's no space left for any 
comments.  It is questionable I would still remember why I have some 
"special" set of rules one year from now, if there was no comments in 
the file.  And it makes very hard for somebody else to change anything I 
created (something obvious to me might not be obvious to somebody else, 
hack it might not be obvious to me couple of months down the road).  I 
find having comments in configuration files very important.

-- 
Aleksandar Milivojevic <amilivojevic@pbl.ca>    Pollard Banknote Limited
Systems Administrator                           1499 Buffalo Place
Tel: (204) 474-2323 ext 276                     Winnipeg, MB  R3T 1L7