Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Bill Nottingham
Matej Cepl (mc...@redhat.com) said: > On 16.2.2012 18:09, Bill Nottingham wrote: > >Note, in this case, I'm referring to "/etc/init.d/foo make-me-a-sandwich," > >or "service foo make-me-a-sandwich". systemctl doesn't bother with this. > > Awesome, I didn't know it (I am currently not on Fedora fo

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Matej Cepl
On 16.2.2012 18:09, Bill Nottingham wrote: Note, in this case, I'm referring to "/etc/init.d/foo make-me-a-sandwich," or "service foo make-me-a-sandwich". systemctl doesn't bother with this. Awesome, I didn't know it (I am currently not on Fedora for a moment). So why some people were reportin

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Bill Nottingham
Bill Nottingham (nott...@redhat.com) said: > Matej Cepl (mc...@redhat.com) said: > > On 16.2.2012 10:35, Reindl Harald wrote: > > >if "iptables.service" exists anything under /etc/init.d/ is ignored > > >service is redirecting to systemctl > > > > Yes, that's a bug in systemctl which I thought w

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Reindl Harald
Am 16.02.2012 18:02, schrieb Matej Cepl: > On 16.2.2012 10:35, Reindl Harald wrote: >> if "iptables.service" exists anything under /etc/init.d/ is ignored >> service is redirecting to systemctl > > Yes, that's a bug in systemctl which I thought we are discussing here. how can this be a bug? th

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Bill Nottingham
Matej Cepl (mc...@redhat.com) said: > On 16.2.2012 10:35, Reindl Harald wrote: > >if "iptables.service" exists anything under /etc/init.d/ is ignored > >service is redirecting to systemctl > > Yes, that's a bug in systemctl which I thought we are discussing here. It redirects for the common verb

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Matej Cepl
On 16.2.2012 10:35, Reindl Harald wrote: if "iptables.service" exists anything under /etc/init.d/ is ignored service is redirecting to systemctl Yes, that's a bug in systemctl which I thought we are discussing here. Matěj -- devel mailing list devel@lists.fedoraproject.org https://admin.fedor

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Michal Schmidt
On 02/16/2012 03:35 PM, Thomas Woerner wrote: I can not decide the way to go here. Also I can not change packaging guidelines. If I add the script to the package, I will get a message that this is not allowed. If the sole purpose of the script should be to print a hint telling the user what th

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Thomas Woerner
On 02/16/2012 03:22 AM, Emanuel Rietveld wrote: On 02/16/2012 02:06 AM, "Jóhann B. Guðmundsson" wrote: On 02/15/2012 11:09 PM, Emanuel Rietveld wrote: I propose the following script in /etc/init.d/iptables I propose you file a BUG against IPTABLES and put your proposal into that bug report

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Reindl Harald
Am 16.02.2012 09:29, schrieb Matej Cepl: > On 16.2.2012 00:12, Reindl Harald wrote: >> this will not work since if a systemd-unit is present >> systemd no longer is interested in anything from >> /etc/init.d/ > > Isn't this missing the point ... we are not here talking about using service > as

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Petr Pisar
On 2012-02-15, Reindl Harald wrote: > thats right, but if you have any error in your rules you get > a problem because in the worst no firewall at all is active > > dooing it with a shell-script results only in failing one > rule with a error-message and apply the other ones, timing > is usually n

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-16 Thread Matej Cepl
On 16.2.2012 00:12, Reindl Harald wrote: this will not work since if a systemd-unit is present systemd no longer is interested in anything from /etc/init.d/ Isn't this missing the point ... we are not here talking about using service as an equivalent of systemd-unit, but using it as direct co

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Slava Zanko
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 15.02.2012 17:45, "Jóhann B. Guðmundsson" wrote: > Thomas Woerner has been working on a more user friendly firewall > solution for Fedora so firewall solution is in a bit of state of flux in > Fedora at this point in time and explains why things are a

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Emanuel Rietveld
On 02/16/2012 02:06 AM, "Jóhann B. Guðmundsson" wrote: > On 02/15/2012 11:09 PM, Emanuel Rietveld wrote: >>> >> >> I propose the following script in /etc/init.d/iptables > > I propose you file a BUG against IPTABLES and put your proposal into > that bug report then wait and see what Thomas has to

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Jóhann B. Guðmundsson
On 02/15/2012 11:09 PM, Emanuel Rietveld wrote: I propose the following script in /etc/init.d/iptables I propose you file a BUG against IPTABLES and put your proposal into that bug report then wait and see what Thomas has to say. JBG -- devel mailing list devel@lists.fedoraproject.org ht

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Al Dunsmuir
On Wednesday, February 15, 2012, 7:15:13 PM, Reindl wrote: > Am 16.02.2012 00:48, schrieb Al Dunsmuir: >> On Wednesday, February 15, 2012, 6:12:44 PM, Reindl wrote: >>> this will not work since if a systemd-unit is present >>> systemd no longer is interested in anything from >>> /etc/init.d/ >> >>

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Reindl Harald
Am 16.02.2012 00:48, schrieb Al Dunsmuir: > On Wednesday, February 15, 2012, 6:12:44 PM, Reindl wrote: >> this will not work since if a systemd-unit is present >> systemd no longer is interested in anything from >> /etc/init.d/ > >> so there is no solution except patch systemd if iptables.servic

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Al Dunsmuir
On Wednesday, February 15, 2012, 6:12:44 PM, Reindl wrote: > this will not work since if a systemd-unit is present > systemd no longer is interested in anything from > /etc/init.d/ > so there is no solution except patch systemd if iptables.service is > called which will not happen because it would

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Reindl Harald
this will not work since if a systemd-unit is present systemd no longer is interested in anything from /etc/init.d/ so there is no solution except patch systemd if iptables.service is called which will not happen because it would be unmaintainable ober the long and doing it for iptables would brin

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Emanuel Rietveld
On 02/15/2012 03:45 PM, "Jóhann B. Guðmundsson" wrote: >> >> >> The service iptables save command is documented in a number of places >> and has been recommended to users for years. See, for example, the >> security guide: >> http://docs.fedoraproject.org/en-US/Fedora/16/html/Security_Guide/sect-S

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Reindl Harald
Am 15.02.2012 20:01, schrieb Genes MailLists: > On 02/15/2012 09:45 AM, "Jóhann B. Guðmundsson" wrote: > >> Experienced admins dont use service iptables blah anyway ( they use >> iptables commands directly ) so it hardly matters to them documentation >> should however be updated for those that a

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Genes MailLists
On 02/15/2012 09:45 AM, "Jóhann B. Guðmundsson" wrote: > Experienced admins dont use service iptables blah anyway ( they use > iptables commands directly ) so it hardly matters to them documentation > should however be updated for those that actually use service iptables > blah to point this out s

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Reindl Harald
Am 15.02.2012 15:45, schrieb "Jóhann B. Guðmundsson": > Experienced admins dont use service iptables blah anyway ( they use iptables > commands directly ) so it hardly > matters to them documentation should however be updated for those that > actually use service iptables blah to point > this o

Re: service iptables save, systemctl, and unhelpful error messages

2012-02-15 Thread Jóhann B. Guðmundsson
On 02/15/2012 01:15 PM, Emanuel Rietveld wrote: Currently, on Fedora 16, service iptables save prints the following: # service iptables save Redirecting to /bin/systemctl save iptables.service Unknown operation save The service iptables save command is documented in a number of places and has