Le 06/12/2016 08:59, Lars Noodén a écrit :
On 12/06/2016 12:14 AM, KatolaZ wrote:
...
The old Debian standard used to be /var/lib/iptables/, and I
don't know when this behaviour changed (especially because I never
changed it, despite the choices made by DDs). ...
Thanks. That seems to fit with hier(7) too. So I will go with that.
The recent Debian documentation also contributed to the confusion. e.g.
https://wiki.debian.org/iptables
https://wiki.debian.org/DebianFirewall
Along those lines, should we recommend that iptables rules be loaded via
init or via some script in /etc/network/if-pre-up.d/ connected to the
interface? I realize /etc/ has to be on the same file system as / but
it seems awkward to have executables there anyway.
Sorry to go a little off-topic, but /etc is there for proper
sorting of files, not by the necessity or possibility to mount it on a
different filesystem, as opposed to /usr. If /etc was on a different
filesystem, it should be mounted by the initramfs script, because it
contains data essential to the system, first of all the init scripts.
Therefore I think you can be assured /etc will never be a mountpoint.
Didier
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
