startup script

#!/bin/sh

# this is /etc/network/if-pre-up.d/iptables

# it starts the firewall immediately prior

# to any network interface coming online.

/sbin/iptables-restore << EOF

# rules go here

EOF