I have added the following line in the /sbin/bastille-netfilter script. So
you don't have to manually modify it, but put all your specific in
/etc/Bastille/bastille-firewall-custom.sh script...
-----------
# custom rules -------------------------------------------------
#
# Put custom rules for public services here before we set up
the normal
# rules for the public interfaces
#
# custom rules -------------------------------------------------
# Run our custom script if it exists
[ -f /etc/Bastille/bastille-firewall-custom.sh ] && .
/etc/Bastille/bastille-firewall-custom.sh
------------
[EMAIL PROTECTED]