<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - systemd needs a sockets-pre.target" href="https://bugs.freedesktop.org/show_bug.cgi?id=57773#c3">Comment # 3</a> on <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - systemd needs a sockets-pre.target" href="https://bugs.freedesktop.org/show_bug.cgi?id=57773">bug 57773</a> from <a class="email" href="mailto:da_audiophile@yahoo.com" title="John <da_audiophile@yahoo.com>"> John</a> <pre>(In reply to <a href="show_bug.cgi?id=57773#c2">comment #2</a>) > Actually thinking about, "sysinit.target" which is run before all sockets > already does the job of a "sockets-pre.target" just fine, so don't really > need the latter. > > hence: please make your fw services an early-boot service, and order it > before sysinit.target, and you can be sure that it will be up before any > system sockets or bound or any normal services are run. Thanks for the suggestion. Just to be sure I have it correct, is this the correct syntax for /usr/lib/systemd/system/ufw.service? [Unit] Description=CLI Netfilter Manager [Service] Type=oneshot ExecStart=/usr/lib/ufw/ufw-init start ExecStop=/usr/lib/ufw/ufw-init stop RemainAfterExit=yes [Install] WantedBy=multi-user.target Before=sysinit.target</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>