HI, I added the line /sbin/ipchains-restore < /etc/ipchains.rules to the /etc/init.d/boot.local script at boot, my first machine(SuSE7.1) booted ok, and the ipchains policy restored fine, but the second test machine is hanging at the line "Starting kernel based NFS server",. What can I do to fix the problem ? Thanks again, Abou.

-----Original Message----- From: Roman Drahtmueller Sent: Friday, May 18, 2001 7:11 PM To: Aboubacar Dramé Cc: 'suse-security@suse.com' Subject: Re: [suse-security] ipchains-restore script

...

Hi I'd like to run a script to retore ipchains rolls saved using

ipchains-save

...

There is any sample script made for SuSE 7.1, I can run at boot to call the file and restore the policy in ipchains-restore ? In wich directory of my SuSE linux 7.1 the script will be to get ruuned at boot ?

The scripts you're looking at are

/sbin/ipchains-restore /sbin/ipchains-save

they read and write to stdio, so save your rules with

/sbin/ipchains-save > /etc/ipchains.rules

and read the rules at startup like

/sbin/ipchains-restore < /etc/ipchains.rules

the script to do that would be /etc/init.d/boot.local for a 7.1. It runs before any network interface is up and running, which ipchains doesn't care about and which is a good idea because you will not have some packets getting through when your machine boots.

...

Thanks Abou.

Thanks, Roman. -- - - | Roman Drahtmüller <draht@suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -