Re: How do I reload Shorewall6 if the IPv6 changes
Roy Marples
Wed Jan 31 23:44:03 2018
On 31/01/2018 21:18, Sven Kirmess wrote:
I run Bering-uClibc 6.1.1 with dhcpcd 6.11.5 and Shorewall 5.1.9.
dhcpcd configures an IPv6 address on ppp0 from router advertisments,
then it requests a /60 network with DHCPv6-PD and assigns IPv6 to
internal interfaces.
Shorewall6 should be reloaded when the IP of an interface changes.
I'm trying to figure out what the best event in "dhcpcd-hooks" is to
reload Shorewall6. Is there an event for "I got a different /60 network
with DHCPv6-PD and all interfaces are assigned new IPs"?
Don't beat around the bush, just reload it on actions.
case "$reason" in
INFORM6|BOUND6|RENEW6|REBIND6|REBOOT6) reload_shorewall;;
esac
I don't know Shorewall, or Linux firewalls for that matter.
But NPF on NetBSD allows reloading without terminating existing
connections which is probably what you need.
Roy
Archive administrator: postmaster@marples.name