[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Cipe starts before firewalldaemon on SuSe-Live CD

On Thu, 2003-09-11 at 05:58, Jan Frederik Pielhau wrote:
> Hi there.
> We've got a SuSe Linux Firewall on CD 2 and use CIPE to connect a branch office.
> Because the remote network is on a dialup-line, we use the cipe's ip-up script to
> insert some iptables rules for the network connection between the LANs. Our Problem
> is that the CIPE Daemon starts before the FAS Daemon and so the rules defined in the
> CIPE's ip-up Script become overwritten. On a "normal" Linux machine we renamed the
> link of the CIPE Daemon in /etc/init.d/rcX.d/@SXXcipe to let cipe start after the
> Firewallscript. How can i then change the order in which the services start on that
> SuSe Firewall On CD??
> I'm not that into cronjobs, would it be possible to create a job that runs after the
> Firewallscript has been run successful?
> Thanks for any comments. 
> Regards,
> Jan F. Pielhau

In general you can change the start order of the scripts by changing the
"S" number to one that is higher the the firewall startup script. I
don't use the firewall because I'm on a local lan but this applies to
-any- start script. Simply cd into the appropriate run level -rc#.d-
directory and relink the firewall script with a number higher than the
"cipe" script. 

OR the better way is to modify the firewall script in /etc/init.d
"# Required-Start:" line and run SuSEconfig.
I have used this method with the webmin script that wants to run before
the network is up.

Ken Schneider
unix user since 1989
linux user since 1994
SuSE user since 1998

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here