環境:ubuntu 10.10
目標:配置網卡啟動時加載iptables規則
網絡上搜到的各種操作:
sh -c "iptables-save > /etc/iptables.rules"
vi /etc/network/interfaces
## 目標網卡下增加一條命令
## pre-up iptables-restore < /etc/iptables.rules
但是,經測試發現。重啟後這些配置會丟失,查看這個文件頭會發現。
# This configuration file is auto-generated.
# WARNING: Do not edit this file, your changes will be lost.
# Please create/edit /etc/network/interfaces.head and /etc/network/interfaces.tail instead,
# their contents will be inserted at the beginning and at the end
# of this file, respectively.
#
# NOTE: it is NOT guaranteed that the contents of /etc/network/interfaces.tail
# will be at the very end of this file.
文件寫得很明確,/etc/network/interfaces是自動生成的。如果我們需要自定義配置,那就創建/etc/network/interfaces.head或/etc/network/interfaces.tail。其中/etc/network/interfaces.tail並不推薦。
以下是一個示例:
auto venet0:0
iface venet0:0 inet static
address 184.22.224.125
netmask 255.255.255.0
pre-up iptables-restore < /etc/iptables.rules