Am 03. Jun, 2002 schwätzte Kevin Brown so:

> Isn't that how it is done on all the systems?  I've dealt with IPf under
> solaris and ipchains/iptables under RH and I believe debian does the same
> thing.  When I used RH4.2 the rules were added to /etc/rc.d/rc.local as
> the last thing the system did upon booting up.

It should be done either right after networking. Actually, it should be done
in the middle of networking. After the interfaces are up, but before routing
gets setup, but that's problematic with how networking's started.

Waiting until later exposes your services until the firewall comes up.

ciao,

der.hans
-- 
#  https://www.LuftHans.com/
# "Communications without intelligence is noise;
# Intelligence without communications is irrelevant."
# Gen. Alfred. M. Gray, USMC