When is post-firewall called?

[barsju]

Perhaps someone could clarify some things about the boot-scripts for me.
In short:
When are they called and what should I use them for?

I understand that post-boot comes before post-firewall. So I wanted to add some stuff after everything has completed and the box had finished booting, and thus put it in post-firewall. Later however I discovered that the post-firewall had been running a couple of times a few hours after the boot. What gives? Is the post-firewall run several times? And in my startup scripts a have some lines that edit iptables. Do I have to put them in post-firewall and the rest in post-boot? :confused:

Sjur

[Oleg]

post-firewall is designed solely for firewall management and called always after firmware has modified firewall settings (I mean connecting to server, disconnecting from it, etc). This script should not be used for other than changing network settings, i.e. manipulating iptables.

post-boot is launched once firmware finished booting. You could modify iptables from it, but your rules will be lost once connection state is changed.