Shorewall devel - May 2003 - Order sensitivity in shorewall configs

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi folks (mostly Tom),

In which shorewall configs is the ordering of entries significant?  I
know about rules & policies, and if i remember correctly zones under
some circumstances (when one is a sub-zone of another), but are there
any others?

I am trying to work out (for my multi-firewall preprocessing script)
whether i need to process different files in different orders.

Thanks,
Paul
http://paulgear.webhop.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+y2oO0yv0OWRYqWwRAtv2AKClLFGqdyTFOMcil9PBU507A8p5MQCff1lk
eE7Dv/fWHlqleh0KO0ho9rw=OOj1
-----END PGP SIGNATURE-----

On Wed, 21 May 2003 21:59:12 +1000, Paul Gear <paul@gear.dyndns.org>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi folks (mostly Tom),
>
> In which shorewall configs is the ordering of entries significant?  I
> know about rules & policies, and if i remember correctly zones under
> some circumstances (when one is a sub-zone of another), but are there
> any others?
>
> I am trying to work out (for my multi-firewall preprocessing script)
> whether i need to process different files in different orders.
>
The following files are order-sensitive:

zones
policy
hosts
rules
tcrules
rfc1918
blacklist

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep@shorewall.net