Tom Eastep wrote:
> On 6/13/10 2:54 PM, lanas wrote:
>
>
>> That'd be the latest from Debian, which is, if I'm not mistaken, 4.4.9.
>>
>> The idea behind the question is to provide users a consistent approach
>> as far as, when they've run 'shorewall check' and it verifies OK, then
>> no errors would be returned when doing a 'shorewall start'.
>>
>>
>
> The checks that *Shorewall* makes are identical during 'check', 'start'
> and 'restart'. But we can never guarantee that iptables-restore won't
> find something to complain about. That's why I always recommend saving
> your configuration ("shorewall save") once you are satisfied that it is
> working correctly. That way, if you change the configuration and
> 'restart' fails during the execute phase, your firewall will be restored
> to its last good state.
>
Another good practice is the use shorewall safe-start and safe-restart,
that way if your new config dont pass shorewall check the system will
fall back to the last good config.
> -Tom
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit. See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
> ------------------------------------------------------------------------
>
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
--
Jorge Armando Medina
Computación Gráfica de México
Web: http://www.e-compugraf.com
Tel: 55 51 40 72, Ext: 124
Email: [email protected]
GPG Key: 1024D/28E40632 2007-07-26
GPG Fingerprint: 59E2 0C7C F128 B550 B3A6 D3AF C574 8422 28E4 0632
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
