Vadim Kurland
-
2001-11-30
- labels: 105275 -->
Has there been any thought to being able to make the
script that the compilers produce from the rulesets to
be templates rather than hardcoded into the iptables.c
or ipfilter.c code?
This could be quite nice as a default could be provided
but could be able to be modified locally or by
packaging to taste. One thought I had was in being able
to make it produce something that could be call'd as an
init.d script during boot-up and shutdown. In this case
there are differences between say RedHat and Debian
that would not make it practical to have a
one-script-fits-all without adding lots of extra checks.