Run user init script before stripping files; improve comment in hosts file

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@445 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2003-02-13 14:59:34 +00:00
parent 92fc84ac14
commit b5c7f91e5a
2 changed files with 5 additions and 5 deletions

View File

@ -3343,12 +3343,14 @@ initialize_netfilter () {
determine_interfaces
determine_hosts
run_user_exit init
#
# The some files might be large so strip them while the firewall is still running
# (restart command). This reduces the length of time that the firewall isn't
# accepting new connections.
#
strip_file rules
strip_file proxyarp
strip_file maclist
@ -3366,8 +3368,6 @@ initialize_netfilter () {
[ -n "$CLEAR_TC" ] && delete_tc
run_user_exit init
echo "Deleting user chains..."
setpolicy INPUT DROP

View File

@ -19,8 +19,8 @@
# either:
#
# a) The IP address of a host
# b) A subnetwork in the form
# <subnet-address>/<mask width>
# b) A subnetwork in CIDR format
# (<subnet-address>/<mask width>)
#
# The interface must be defined in the
# /etc/shorewall/interfaces file.