all services using/needing "net" should have a "after firewall"
we want all services using network to be started after firewall. To
solve that, add provides firewall
to shorewall and add
after firewall
to all networking services.
A quick grep gives those files:
main/arpon/arpon.initd
main/arpwatch/arpwatch.initd
main/asterisk/asterisk.initd
main/bind/bind.initd
main/busybox-initscripts/dnsd.initd
main/busybox-initscripts/httpd.initd
main/busybox-initscripts/inetd.initd
main/chrony/chronyd.initd
main/clamav/clamd.initd
main/clamav/freshclam.initd
main/clamsmtp/clamsmtpd.initd
main/conntrack-tools/conntrackd.initd
main/cyrus-sasl/saslauthd.initd
main/dansguardian/dansguardian.initd
main/dhcp/dhcpd.initd
main/distcc/distccd.initd
main/djbdns/dnscache.initd
main/djbdns/tinydns.initd
main/dnsmasq/dnsmasq.initd
main/dovecot/dovecot.initd
main/dropbear/dropbear.initd
main/ez-ipupdate/ez-ipupdate.initd
main/fetchmail/fetchmail.initd
main/gross/grossd.initd
main/iaxmodem/iaxmodem.initd
main/iproute2-qos/qos.initd
main/ipsec-tools/racoon.initd
main/iscsitarget/ietd.initd
main/lighttpd/lighttpd.initd
main/lighttpd/spawn-fcgi.initd
main/mdadm/mdadm.initd
main/mini_httpd/mini_httpd.initd
main/mysql/mysql.initd
main/net-snmp/snmpd.initd
main/net-snmp/snmptrapd.initd
main/nfs-utils/nfs.initd
main/ngircd/ngircd.initd
main/oidentd/oidentd.initd
main/openldap/slapd.initd
main/openldap/slurpd.initd
main/opennhrp/opennhrp.initd
main/openssh/sshd.initd
main/openvpn/openvpn.initd
main/pgcluster/pgcluster.initd
main/pgpool/pgpool.initd
main/pingu/pingu.initd
main/portmap/portmap.initd
main/postfix/postfix.initd
main/postgresql/postgresql.initd
main/quagga/bgpd.initd
main/quagga/ospf6d.initd
main/quagga/ospfd.initd
main/quagga/ripd.initd
main/quagga/ripngd.initd
main/quagga/zebra.initd
main/rsync/rsyncd.initd
main/samba/samba.initd
main/shorewall-common/shorewall.initd
main/shorewall-lite/shorewall-lite.initd
main/snort/snort.initd
main/sntpc/sntpc.initd
main/squid/squid.initd
main/subversion/svnserve.initd
main/tinyproxy/tinyproxy.initd
main/vsftpd/vsftpd.initd
non-free/3dm2/3dm2.initd
testing/asterisk/asterisk.initd
testing/fprobe/fprobe.initd
testing/gross-svn/gross-svn.initd
testing/haproxy/haproxy.initd
testing/kamailio/kamailio.initd
testing/knock/knock.initd
testing/mpd/mpd.initd
testing/nagios/nagios.initd
testing/opensips/opensips.initd
testing/openvpn/openvpn.initd
testing/postgrey/postgrey.initd
testing/prosody/prosody.initd
testing/transmission/transmission-daemon.initd
testing/ulogd/ulogd.initd
testing/wzdftpd/wzdftpd-svn.initd
unstable/apcupsd/apcupsd.initd
unstable/freeradius/freeradius.initd
unstable/jabberd14/jabberd14.initd
x11/transmission/transmission-daemon.initd
(from redmine: issue id 164, created on 2009-09-14, closed on 2009-09-17)