On 02/10/2018 08:52 AM, Matt Darfeuille wrote:

> 
> It's always interesting to learn how Shorewall works!
> Given your explanation it clearly makes no sense to nitpick about this.
> The reason why I was asking is that my interface is configure by dhcp.
> My understanding is that shorewall should be reloaded when a new lease
> is acquired?

It depends. If you use the interface's address variable, then you must
reload the ruleset. Othewise, it should only be required when the
interface first comes up.

> Based on that asumption I have a script in
> /etc/dhcp/dhclient-exit-hooks.d that will reload shorewall when the
> 'reason' is 'BOUND' and I was simply looking for a way to only reload
> shorewall when it is already started.

You can:

    shorewall status > /dev/null 2>&1 && shorewall reload

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to