I am using ufw
on Alpine linux.
I have configured it in a pretty standard way:
apk add --no-cache ufw
ufw allow ssh
ufw allow http
ufw allow https
ufw limit ssh
ufw enable
rc-update add ufw default
But I am not sure if I should be setting it's runlevel to boot
so I am sure it starts before any other services (ssh and docker (and therefor http/https services) are both set to start at default
).
Does it matter? I don't believe alpine's RC system has a dependency setup like you might find in systemd
.
Alpine preference is to use
awall
, Alpineiptables
wrapper. And it uses default runlevel foriptables
(awall
generatesiptables
rules).So, in most cased default runlevel is OK.
But see that your networking is activated in boot runlevel, so if you are paranoid just use ifupdown-ng pre/post scripts.