Hi Tom,

> > 1) Start a tmux session (so you won't lose your shell on
> > disconnect / timeout) and make sure you're root
> > 2) type the following: 'shorewall start; sleep 5m; shorewall
> > clear'  
> 
> This is very similar to what 'shorewall safe-start' does, except that:
> 
> a) safe-start prompts you to ask if you want to keep the config or   
>    clear.
> 
> b) The timeout is currently fixed at 60 seconds.

I wasn't aware of this; thanks for the info. Does it also work if the
connection with the shell is terminated? Usually any shell command that
implements a sleep timer without forking is terminated, killing any
timer or pending routine.

Of course on a plain shell one could simply disown the command (e.g.
via 'shorewall safe-clear &!' when using zsh, or 'shorewall safe-clear
& disown' on bash) but then you won't be able to answer the command,
making it equivalent to answering 'n'. In such a case it's better to
execute the command 'shorewall safe-clear' from within tmux or GNU
screen.

Have a good new year,
- Mark


Note: I understand that many people are probably already aware of the
above comments but I'll accept the risk of sounding pedantic. Perhaps
some day they can save someone from suddenly having to take a dreadful
trip to a data center simply to unload a firewall. I know all about
these wonderful incidents that force one to spend free evenings in an
unplanned and not particularly welcome way...)


------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to