Now, it seems like firestarter created a file
/etc/dhclient-exit-hooks
just containing just the line
sh /etc/init.d/firestarter start
However, it seems like ubuntu is configured to look for this file in /etc/dhcp3 (I'm not quite sure about this) *or* to look for executables in /etc/dhcp3/dhclient-exit-hooks.d/ (I think it will run them all after dhclient obtains an ip.)
Anyway, here is a FIX to get a persistent (firestarter configured) firewall to be activated after reboot (i.e., when getting ip via dhcp):
Rename
/etc/dhclient-exit-hooks
to
/etc/dhcp3/dhclient-exit-hooks.d/firestarter
and then make it executable (using chmod +x).
Is this is a bug in ubuntu?