Shorewall users - Mar 2005 - Re: rule isn''t permanent?

Robin Lynn Frank wrote:
> 
> My question is why is the rule successful only until the shorewall box
> is rebooted?  
When you re-boot, Shorewall is started with the "-f" (fast) option.
This
means that if there is a restore file generated by a "shorewall save" 
command (as given by the RESTOREFILE setting in shorewall.conf) then 
Shorewall is restored from that file using iptables-restore rather than 
by parsing all of the config files and running iptables 100s (or 1000s) 
of times.

After you have done a "save", each time that you make a configuration 
change that you want to be permanent, you must "shorewall save" again.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

On Sat, 2005-03-19 at 10:16, Tom Eastep wrote:
> Robin Lynn Frank wrote:
> 
> > 
> > My question is why is the rule successful only until the shorewall box
> > is rebooted?  
> 
> When you re-boot, Shorewall is started with the "-f" (fast)
option. This
> means that if there is a restore file generated by a "shorewall
save"
> command (as given by the RESTOREFILE setting in shorewall.conf) then 
> Shorewall is restored from that file using iptables-restore rather than 
> by parsing all of the config files and running iptables 100s (or 1000s) 
> of times.
> 
> After you have done a "save", each time that you make a
configuration
> change that you want to be permanent, you must "shorewall save"
again.
> 
> -Tom
Thanks, Tom, not only for providing the info to solve the problem, but
providing it in a way that explained the process very well.
-- 
 Robin Lynn Frank - Director of Operations - Paradigm-Omega, LLC
Website:   http://www.paradigm-omega.com/
RSS:       http://paradigm-omega.blogspot.com/atom.xml
Spamtraps: http://www.paradigm-omega.net/cgi-bin/custmail.cgi
====================================================================Topics never
to mention to me:
rap/hip-hop