sebastien/watchdog — Issue #9: firewall watchdog Rule
Author: markusgattol
Created: 2011-10-24 23:32:19+00:00
State: open

We should come up with a watchdog rule that tests whether or not certain netfilter rules are in place
* use `iptables` to gather current state
* maybe be smart such as: if we run a httpd let port 80 be open, look for `Port xxxx` in `sshd_config`...
* even if this rule has a tiny bit of "smartness" at its core, the user still has total control i.e. can add config on top or entirely override
* don't try to do to much though as watchdog is not ruleset creator

I guess what I am trying to say is, if I want all ports but 80 be closed from the outside, it would be nice to have a watchdog rule that could check that... e.g. after a reboot, maybe loading my iptables script into the kernel didn't work for some reason, someone fiddled with the live-config, some process...