Re: rule isn''t permanent?

Tom Eastep
2005-03-19T18:16:17Z

Robin Lynn Frank wrote:

>
> My question is why is the rule successful only until the shorewall box
> is rebooted?

When you re-boot, Shorewall is started with the "-f" (fast) option.
This
means that if there is a restore file generated by a "shorewall save"
command (as given by the RESTOREFILE setting in shorewall.conf) then
Shorewall is restored from that file using iptables-restore rather than
by parsing all of the config files and running iptables 100s (or 1000s)
of times.

After you have done a "save", each time that you make a configuration
change that you want to be permanent, you must "shorewall save" again.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key