On 12/06/2016 12:14 AM, KatolaZ wrote:
> ...
> The old Debian standard used to be /var/lib/iptables/, and I
> don't know when this behaviour changed (especially because I never
> changed it, despite the choices made by DDs). ...
Thanks. That seems to fit with hier(7) too. So I will go with that.
The recent Debian documentation also contributed to the confusion. e.g.
https://wiki.debian.org/iptables
https://wiki.debian.org/DebianFirewall
Along those lines, should we recommend that iptables rules be loaded via
init or via some script in /etc/network/if-pre-up.d/ connected to the
interface? I realize /etc/ has to be on the same file system as / but
it seems awkward to have executables there anyway.
Regards
Lars
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
