[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: iptables-save/restore with dynamic IP



On Wed, 2004-10-20 at 14:20, Martin G.H. Minkler wrote:
> Alohá!
snip...
> 
> Unfortunately I am working with a dynamically assigned IP that is passed 
>   to the iptables script called in /etc/ppp/ip-up by pppd.

So, run your iptables-restore in the boot sequence eg
/etc/init.d/iptables, and call a script at the end of any if-up scripts
to add the dynamic addresses after they have been assigned..

This way you have a basic ruleset running before any network is up and
then use the interface "up" scripts to insert any ip specific rules
after any dynamic assignments are made.. You will always know the
correct rule number to Insert at if you keep the interfaces as separate
chains..

Regards,
Peter



Reply to: