if [ -d /etc/ufw/before.d ]; then
# --exit-on-error run-parts /etc/ufw/before.d
fi
;;
...
into before.init, which works, but breaks updating since this is a file of the ufw package. To get this really effective, it would have to be defined as a standard, making package maintainers to put their scripts into these directories.
Since ufw supports only a subset of iptables, this is needed to implement functions not covered by ufw, e.g. ipset.
Well, I've simulated this by putting
case "$1" in
start)
if [ -d /etc/ufw/before.d ]; then
run- parts /etc/ufw/before.d
# --exit-on-error
fi
;;
...
into before.init, which works, but breaks updating since this is a file of the ufw package. To get this really effective, it would have to be defined as a standard, making package maintainers to put their scripts into these directories.
Since ufw supports only a subset of iptables, this is needed to implement functions not covered by ufw, e.g. ipset.