Kai Schaetzl wrote:
William L. Maltby wrote on Thu, 03 Nov 2005 18:59:33 -0500:
I think the main point of the discussion got lost in the meantime. It was *not* rc.whatever vs. init.d scripts, but "iptables save" vs. running your own iptables script. There are good reasons to run your own script instead of saving and restarting that saved state and it's quite different in functionality. Whether you then run this script as an init script, from rc.local or yet another startup method is a matter of taste (although init.d clearly has technical/usability advantages).
If you really want a 'neat' way to manage your iptables firewall then just use shorewall.