[Shorewall-users] 1.2.10 Preview

Tom Eastep
Mon, 18 Mar 2002 15:04:58 -0000

In http://www.shorewall.net/pub/shorewall/Beta/shorewall is a version of
/sbin/shorewall that includes a ''try'' command:

    shorewall try <configuration directory>

This command:

a) Tries "shorewall -c <configuration directory> restart
b) If that command fails, it issues "shorewall start" to start the
default
configuration.

This should allow folks who do remote administration to try new
configurations without the risk of isolating themselves. It''s probably
a
good idea to redirect the output as in:

    shorewall try /etc/foo > /tmp/tryfoo 2>&1

(ash users will have to specify individual redirection of file descriptors 2
and 1).

If the new config works, you can then copy the files from <configuration
directory> to /etc/shorewall.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net