Le 10 octobre 2022 17:17:16 GMT+02:00, "Ludovic Courtès" <l...@gnu.org> a écrit
:
>Hi!
>
>Alexey Abramov <leven...@mmer.org> skribis:
>
>[...]
>
>>> I’m not sure. IIUC, a “networking target” here could translate to a
>>> Shepherd service that depends on all the relevant DHCP and static
>>> networking services. The question the becomes how to express that
>>> grouping conveniently.
>>
>> Yes, I also would like to point out that their must be a way to
>> establish a firewall, for example, *before* any network interface is up
>> (After=network-pre.target in systemd [1]). And the same thing during the
>> shutdown procedure (Before=network-pre.target in systemd).
>
>I would do that by having ‘networking’ depend on ‘firewall’ (say).
>
>Does that make sense?
Wouldn't there be an issue if firewall rules reference interfaces created by
the networking service?
>
>It’d be interesting to see whether we need something beyond this.
>
