Changing order so global rules are applied last

1 files changed, 10 insertions, 10 deletions

diff --git a/src/slack/rc.firewall.in b/src/slack/rc.firewall.in
index 4179255..76ae153 100755
--- a/src/slack/rc.firewall.in
+++ b/src/slack/rc.firewall.in
@@ -49,10 +49,6 @@
 #      /etc/firewall.d/ipsets             - host specific IP sets
 #      /etc/firewall.d/apps.d/*.ipsets    - app specific IP sets
 #
-#      /etc/firewall.d/global4            - centrally maintained IPv4 rules
-#      /etc/firewall.d/global6            - centrally maintained IPv6 rules
-#      /etc/firewall.d/global             - centrally maintained IPv4/IPv6 rules
-#
 #      /etc/firewall.d/cluster/rules4     - cluster specific IPv4 firewall rules
 #      /etc/firewall.d/cluster/rules6     - cluster specific IPv6 firewall rules
 #      /etc/firewall.d/cluster/rules      - cluster specific IPv4/IPv6 firewall rules
@@ -65,6 +61,10 @@
 #      /etc/firewall.d/apps.d/*.rules6    - app specific IPv6 firewall rules
 #      /etc/firewall.d/apps.d/*.rules     - app specific IPv4/IPv6 firewall rules
 #
+#      /etc/firewall.d/global4            - centrally maintained IPv4 rules
+#      /etc/firewall.d/global6            - centrally maintained IPv6 rules
+#      /etc/firewall.d/global             - centrally maintained IPv4/IPv6 rules
+#
 #      /etc/firewall.d/global-post        - centrally maintained post-hook script
 #      /etc/firewall.d/cluster/rules-post - host specific post-hook script
 #      /etc/firewall.d/rules-post         - host specific post-hook script
@@ -197,12 +197,6 @@ start() {
       load ipset ${FILE} "adding IP sets (App: $(basename ${FILE})) ..."
    done
 
-   # apply company policy for firewall rules
-   load iptables  ${FW_PREFIX}global4 "adding IPv4 global rules"
-   load ip6tables ${FW_PREFIX}global6 "adding IPv6 global rules"
-   load iptables  ${FW_PREFIX}global  "adding IPv4/IPv6 global rules"
-   load ip6tables ${FW_PREFIX}global
-
    # apply cluster specific firewall rules
    load iptables  ${FW_PREFIX}cluster/rules4  "adding IPv4 cluster rules"
    load ip6tables ${FW_PREFIX}cluster/rules6  "adding IPv6 cluster rules"
@@ -247,6 +241,12 @@ start() {
       done
    fi
 
+   # apply company policy for firewall rules
+   load iptables  ${FW_PREFIX}global4 "adding IPv4 global rules"
+   load ip6tables ${FW_PREFIX}global6 "adding IPv6 global rules"
+   load iptables  ${FW_PREFIX}global  "adding IPv4/IPv6 global rules"
+   load ip6tables ${FW_PREFIX}global
+
    # run post-hooks
    run_hook start ${FW_PREFIX}global-post         "running global post-hook start ..."
    run_hook start ${FW_PREFIX}cluster/rules-post  "running cluster post-hook start ..."