search for: ermeng

...shorewall stop" to have a basic emergency rule with only ACCEPT:info all all tcp ssh rule instead with DROP all policy. Shorewall could check for a directory under /etc/shorewall/emergency and if it find it do a shorewall try /etc/shorewall/emergency 360 then a shorewall stop or do a shorewall ermengency which will default to shorewall stop if the directory doesn''t exist. What do you think? Thanks Pascal PS: While I use the shorewall try option, I will still be great to know that whatever happens we can always ssh back in.