On 6/13/10 2:54 PM, lanas wrote:

> 
> That'd be the latest from Debian, which is, if I'm not mistaken, 4.4.9.
> 
> The idea behind the question is to provide users a consistent approach
> as far as, when they've run 'shorewall check' and it verifies OK, then
> no errors would be returned when doing a 'shorewall start'.  
>

The checks that *Shorewall* makes are identical during 'check', 'start'
and 'restart'. But we can never guarantee that iptables-restore won't
find something to complain about. That's why I always recommend saving
your configuration ("shorewall save") once you are satisfied that it is
working correctly. That way, if you change the configuration and
'restart' fails during the execute phase, your firewall will be restored
to its last good state.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to