I've looked at this issue again in reference to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990834 and while I still cannot reproduce, I plan to change to the following (I won't ship the commented out lines of course):
This removes DefaultDependencies=no so that 'sysinit' will be pulled in and changes the single 'Before=network.target' to instead have Before=network-pre.target and Wants=network-pre.target. This won't help people who have different firewall software installed (like some of the comments), but should make startup more robust (eg, for those needing something from sysinit) while still allowing it to come up before the network.
I've looked at this issue again in reference to https:/ /bugs.debian. org/cgi- bin/bugreport. cgi?bug= 990834 and while I still cannot reproduce, I plan to change to the following (I won't ship the commented out lines of course):
[Unit] Uncomplicated firewall man:ufw( 8) ncies=no network. target network- pre.target pre.target
Description=
Documentation=
#DefaultDepende
#Before=
Before=
Wants=network-
[Service] /lib/ufw/ ufw-init start quiet /lib/ufw/ ufw-init stop
Type=oneshot
RemainAfterExit=yes
ExecStart=
ExecStop=
[Install] multi-user. target
WantedBy=
This removes DefaultDependen cies=no so that 'sysinit' will be pulled in and changes the single 'Before= network. target' to instead have Before= network- pre.target and Wants=network- pre.target. This won't help people who have different firewall software installed (like some of the comments), but should make startup more robust (eg, for those needing something from sysinit) while still allowing it to come up before the network.