Re: How do I reload Shorewall6 if the IPv6 changes
Roy Marples
Fri Feb 02 06:42:43 2018
On 01/02/18 22:15, Sven Kirmess wrote:
On Thu, Feb 1, 2018 at 12:44 AM, Roy Marples <roy@xxxxxxxxxxxx
<mailto:roy@xxxxxxxxxxxx>> wrote:
Don't beat around the bush, just reload it on actions.
case "$reason" in
INFORM6|BOUND6|RENEW6|REBIND6|REBOOT6) reload_shorewall;;
esac
That was what I was looking for, the correct list of actions. Thanks!
man page dhcpcd-run-hooks(8) is your friend.
I don't know Shorewall, or Linux firewalls for that matter.
But NPF on NetBSD allows reloading without terminating existing
connections which is probably what you need.
Yes, that works the same with Shorewall.
Reloading Shorwall takes 1 minute on my system. Are the hooks in
/libexec/dhcpcd-hooks guaranteed to only run one at a time? Or do I have
to add locking myself?
And is it a problem for dhcpcd if one of the hook scripts runs for a minute?
Nothing in dhcpcd is threaded and dhcpcd will block until the script is
done.
So this is only a problem for you if your lease lasts less than a minute.
Roy
Archive administrator: postmaster@marples.name