On Fri, 25 Nov 2016 01:56:54 +0100, Carlo Stemberger wrote: > At the moment all seems to work as expected, with an exception: the > program doesn't start at the system boot; however I can run Shorewall with > both > `# service shorewall start` and `# shorewall start`. > > Please note that I set `startup=1` in `/etc/default/shorewall` as I have only worked with this under Ubuntu (not Debian per se), but I believe the issue you are seeing is that the Shorewall documentation has not been updated to reflect the use of systemd instead of the old-style /etc/init.d/shorewall script.
In particular, it was that script which checked for the value of "startup" as set in the /etc/default/shorewall file -- but the shorewall.service file used under systemd does not care about that setting. To turn on automatic startup of shorewall under systemd, you need to "enable" the service: # systemctl enable shorewall The Loaded: line in the output of "systemctl status shorewall" will confirm (with the word "enabled" or "disabled") whether or not the service is set for auto-startup. Note that "service shorewall start" translates to "systemctl start shorewall" under systemd, which starts up Shorewall right then, but doesn't configure it to auto-start at boot time later. Nathan