Yes, I'll use an iptables simple script or not so simple, it doesn't matter, where should I place it and where should I call you (I'm an RH and Mdk experienced user an suse it's a bit diferent, and partialy lost, that's why I'm asking this). There is a file /etc/rc.d/skeleton which can be used as a template for your firewall script. You can copy it to /etc/rc.d/firewall and edit it to let it call your actual firewall script. In the easiest form you just need the "start" command to work to start your firewall when
On Tuesday 29 May 2001 15:17, Pupeno wrote: the system goes up and then leave it on forever. Then you can put "SXXfirewall" symlinks into the various runlevels (depends on your SuSE Version, normally 2 + 3 or 3 + 5) which point to your file. I would suggest to place several links, depending on your firewall script: The first one before the network goes up to have protection from the start. (This will eventually produce errors if you refer to certain interfaces in your script but it will set the policies at least) The last call to your firewall script should be made when all interfaces are up. If you have some interfaces that come up later (ppp,ippp) or if some ip-adresses change later (dynamic address while dialing in) you have to call your firewall script again. (e.g. from within /etc/ppp/ip-up). But that depends on your actual script, if it deals with that interfaces at all. Andreas ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been scanned for the presence of computer viruses. **********************************************************************