extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 09:47:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add warning about Upstart

Browse Source
This commit is contained in:
Tom Eastep 2010-07-23 07:38:28 -07:00
parent 898274dd77
commit 00352baba7
1 changed files with 18 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
docs/Shorewall-init.xml
View File

@ -74,13 +74,13 @@
<title>Closing the Firewall before the Network Interfaces are brought <title>Closing the Firewall before the Network Interfaces are brought
up</title> up</title>
<para> When Shorewall-init is first installed, it does nothing until you <para>When Shorewall-init is first installed, it does nothing until you
configure it.</para> configure it.</para>
<para>The configuration file is <filename>/etc/default/shorewall-init <para>The configuration file is <filename>/etc/default/shorewall-init
</filename>on Debian-based systems and </filename>on Debian-based systems and
<filename>/etc/sysconfig/shorewall-init</filename> otherwise. There are <filename>/etc/sysconfig/shorewall-init</filename> otherwise. There are
two settings in the file: </para> two settings in the file:</para>
<variablelist> <variablelist>
<varlistentry> <varlistentry>
@ -115,7 +115,7 @@
<listitem> <listitem>
<para>Be sure that your current firewall script(s) (normally in <para>Be sure that your current firewall script(s) (normally in
<filename>/var/lib/&lt;product&gt;/firewall</filename>) is(are) <filename>/var/lib/&lt;product&gt;/firewall</filename>) is(are)
compiled with the 4.4.10 compiler. </para> compiled with the 4.4.10 compiler.</para>
<para>Shorewall and Shorewall6 users can execute these <para>Shorewall and Shorewall6 users can execute these
commands:</para> commands:</para>
@ -139,7 +139,7 @@
</listitem> </listitem>
</orderedlist> </orderedlist>
<para>That's all that is required. </para> <para>That's all that is required.</para>
</section> </section>
<section id="NM"> <section id="NM">
@ -147,7 +147,7 @@
<para>To integrate with NetworkManager and ifup/ifdown, additional steps <para>To integrate with NetworkManager and ifup/ifdown, additional steps
are required. You probably don't want to enable this feature if you run a are required. You probably don't want to enable this feature if you run a
link status monitor like swping or LSM. </para> link status monitor like swping or LSM.</para>
<orderedlist numeration="loweralpha"> <orderedlist numeration="loweralpha">
<listitem> <listitem>
@ -165,15 +165,21 @@
<listitem> <listitem>
<para>Optional) -- If you have specified at least one <para>Optional) -- If you have specified at least one
<option>required</option> or <option>optional</option> interface, you <option>required</option> or <option>optional</option> interface, you
can then disable automatic firewall startup at boot time. On can then disable automatic firewall startup at boot time. On Debian
Debian-based systems, set startup=0 in systems, set startup=0 in
<filename>/etc/default/<replaceable>product</replaceable></filename>. <filename>/etc/default/<replaceable>product</replaceable></filename>.
On other systems, use your service startup configuration tool On other systems, use your service startup configuration tool
(chkconfig, insserv, ...) to disable startup. </para> (chkconfig, insserv, ...) to disable startup.</para>
<warning>
<para>If your system uses Upstart as it's system initialization
daemon, you should not disable startup. Upstart is standard on
recent Ubuntu and Fedora releases and is optional on Debian.</para>
</warning>
</listitem> </listitem>
</orderedlist> </orderedlist>
<para>The following actions occur when an interface comes up: </para> <para>The following actions occur when an interface comes up:</para>
<informaltable> <informaltable>
<tgroup cols="3"> <tgroup cols="3">
@ -253,7 +259,7 @@
</tgroup> </tgroup>
</informaltable> </informaltable>
<para> For optional interfaces, the <para>For optional interfaces, the
<filename>/var/lib/<replaceable>product</replaceable>/<replaceable>interface</replaceable>.state</filename> <filename>/var/lib/<replaceable>product</replaceable>/<replaceable>interface</replaceable>.state</filename>
files are maintained to reflect the state of the interface so that they files are maintained to reflect the state of the interface so that they
may be used by the standard <firstterm>isusable</firstterm> script. Please may be used by the standard <firstterm>isusable</firstterm> script. Please
@ -272,13 +278,13 @@
<para>Similarly, if an optional interface goes down and there are no <para>Similarly, if an optional interface goes down and there are no
optional interfaces remaining in the up state, then the firewall is optional interfaces remaining in the up state, then the firewall is
stopped. </para> stopped.</para>
<para>On Debian-based systems, during system shutdown the firewall is <para>On Debian-based systems, during system shutdown the firewall is
opened prior to network shutdown (<command>/etc/init.d/shorewall opened prior to network shutdown (<command>/etc/init.d/shorewall
stop</command> performs a 'clear' operation rather than a 'stop'). This is stop</command> performs a 'clear' operation rather than a 'stop'). This is
required by Debian standards. You can change this default behavior by required by Debian standards. You can change this default behavior by
setting SAFESTOP=1 in <filename>/etc/default/shorewall</filename> setting SAFESTOP=1 in <filename>/etc/default/shorewall</filename>
(<filename>/etc/default/shorewall6</filename>, ...). </para> (<filename>/etc/default/shorewall6</filename>, ...).</para>
</section> </section>
</article> </article>