[cobalt-security] ipchains adding to rc.local

["R. Hamburg" <cobalt@xxxxxxx>]

Hi,

Quick question:

I have installed IPchains. And have added some ip to block. However I
understand that when you have reboot the server all
/sbin/ipchains -I input -s 203.232.240.215 -j DENY -l
/sbin/ipchains -I input -s 63.25.226.171 -j DENY -l
are lost.
So I thought adding this lines to /etc/rc.d/rc.local
But I wondering right wheter the lines added to the bottum should be closed
by an 'fi' command, like all other entries in the rc.local file ??

is this correct so the list must look like this:

/sbin/ipchains -I input -s 203.232.240.215 -j DENY -l
/sbin/ipchains -I input -s 63.25.226.171 -j DENY -l
fi

or can I just them and no fi command at the end ?

Thanks for your advice

- Robbert