iptables-restore on boot code

[luison]

Hi. Our office server after latest reboot with kernel updates failed to boot network the first time. After some tweaking and an additional restart everything seems fine now but we've just noticed that the iptables file was not restored on boot and our firewall has been therefore down for a few days.

I am not sure if the issue was there before but the way we load the iptables file is like the one bellow on the network config... (etc/network/interfaces).

Is this correct?
Should it be done another way or on the vmbr0 interface instead of the eth0?

Many thanks.
Jose Luis

# network interface settings
auto lo
iface lo inet loopback

iface eth0 inet manual
        post-up iptables-restore < /etc/iptables.up.rules

iface eth1 inet manual

iface eth2 inet manual

auto vmbr0
iface vmbr0 inet static
        address  192.168.0.20
        netmask  255.255.255.0
        gateway  192.168.0.1
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0

iface vmbr1 inet manual
        bridge_ports none
        bridge_stp off
        bridge_fd 0

 

[JustaGuy]

Should it be done another way or on the vmbr0 interface instead of the eth0?

        post-up iptables-restore < /etc/iptables.up.rules

This Ubuntu tutorial uses pre-up instead.