forked from extern/shorewall_code
Run user init script before stripping files; improve comment in hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@445 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
92fc84ac14
commit
b5c7f91e5a
@ -3343,12 +3343,14 @@ initialize_netfilter () {
|
||||
determine_interfaces
|
||||
determine_hosts
|
||||
|
||||
run_user_exit init
|
||||
|
||||
#
|
||||
# The some files might be large so strip them while the firewall is still running
|
||||
# (restart command). This reduces the length of time that the firewall isn't
|
||||
# accepting new connections.
|
||||
#
|
||||
|
||||
|
||||
strip_file rules
|
||||
strip_file proxyarp
|
||||
strip_file maclist
|
||||
@ -3366,8 +3368,6 @@ initialize_netfilter () {
|
||||
|
||||
[ -n "$CLEAR_TC" ] && delete_tc
|
||||
|
||||
run_user_exit init
|
||||
|
||||
echo "Deleting user chains..."
|
||||
|
||||
setpolicy INPUT DROP
|
||||
|
@ -19,8 +19,8 @@
|
||||
# either:
|
||||
#
|
||||
# a) The IP address of a host
|
||||
# b) A subnetwork in the form
|
||||
# <subnet-address>/<mask width>
|
||||
# b) A subnetwork in CIDR format
|
||||
# (<subnet-address>/<mask width>)
|
||||
#
|
||||
# The interface must be defined in the
|
||||
# /etc/shorewall/interfaces file.
|
||||
|
Loading…
Reference in New Issue
Block a user