Roberto C. Sánchez wrote:> Greetings,
>
> There is a very old bug report [0] still floating around asking for a
> configuration check before restarting on upgrade. While this may not
> have been possible in the past, would it be possible now with
> Shorewall-perl?
Hi Roberto,
This is feasible, given that Shorewall-perl does a pretty thorough job of
checking the configuration (and 4.2 will do even a better job).
Another idea would be to define an environmental variable that would cause
the /etc/init.d/shorewall script to perform a safe-restart when asked to
restart. That way, the firewall wouldn''t go into the stopped state if
''restart'' failed.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/