> shutting down my firewall I want all network traffic to an from the 
> internet blocked. 
> 
> Current situation is, that shutting done the firewall nothing is blocked.

Although this bug is 2 years old, I agree that it's a serious problem that 
deserves to be fixed.  I noticed it right away when I installed firehol:  
the normal shutdown sequence of '/etc/init.d/firehol stop' allows all 
traffic to pass until the interfaces are brought down.

The proposed patch is simple and would solve the problem.  I would go even 
further however, by

* setting the default STOP_ACTION to 'panic' instead of 'stop'.

* inserting a warning into /etc/default/firehol, warning users not to use 
STOP_ACTION=stop.

Thanks,
Andrew.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to