Hi, according to "/etc/default/shorewall-init" and http://shorewall.net/ipsets.html the user can use shorewall-init to save/restore ipsets used by shorewall/shorewall6.
But this doesn't work on Debian. Looks like the "save"/"restore" logic is completely missing in the runscript. Tested with > # dpkg -l | grep -i shorewall > ii shorewall 4.6.2.2-1 > ii shorewall-core 4.6.2.2-1 > ii shorewall-init 4.6.2.2-1 > ii shorewall6 4.6.2.2-1 I wasn't sure if I should fill a bug at bugs.debian.org or post this here (IMHO Roberto is following this list). For me this is a bug. Also, it looks like Debian doesn't ship a runscript for ipset... so there is no replacement out of the box. If this functionality was removed by intention please remove it completely and document it somewhere (I hope I haven't overlooked something) like we are doing it in Gentoo. Thanks! -Thomas ------------------------------------------------------------------------------ _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
