Hi,
as I just learned on the mailing list, that at least the packages
fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
modify iptables rules...
Is there a chance for race conditions? I.e. two packages trying to add
iptables rules at the same time and thereby failing to do so?
I think that the best solution would be for the script to construct a
single iptables command string and then run it.
--
John Hasler
jhas...@newsguy.com
Elmwood, WI USA
Patrick Schleizer wrote:
> as I just learned on the mailing list, that at least the packages
> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
> modify iptables rules...
> Is there a chance for race conditions? I.e. two packages trying to add
> iptables rules at the same tim
Patrick Schleizer a écrit :
>
> as I just learned on the mailing list, that at least the packages
> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
> modify iptables rules...
Firewall managers such as ufw, shorewall, firestarter...
Custom iptables scripts.
IDS such as portsen
Le 12/11/2015 20:47, Pascal Hambourg a écrit :
> Patrick Schleizer a écrit :
>> as I just learned on the mailing list, that at least the packages
>> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
>> modify iptables rules...
> Firewall managers such as ufw, shorewall, firestart
Patrick Schleizer writes:
> I.e. two packages trying to add iptables rules at the same time and
> thereby failing to do so?
They can't do that as each call to iptables locks the table be operated
on. Without -w iptables exits when it can't get the lock. With -w it
waits.
Pascal Hambourg writes:
6 matches
Mail list logo