Comment 9 for bug 366967

For the original problem, why not remove eth0 from auto in /etc/network/interfaces, and call ifup eth0 from rc.local?

It appears to me that there are conflicting requirements when interfaces should be configured. I like to have the
iptable rules in place before bringing up the outer interface.