-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[EMAIL PROTECTED] wrote:
| On Tue, Nov 19, 2002 at 09:54:43AM -0500, Matthews, John wrote:
|
|>I believe firewall rules are sometimes kept in /etc/sysconfig/firewall, so
|>you might want to read the contents of that file too and ensure you don't
|>have rules being set there.
|
|
| I just set up iptables on my cable cnxn (Works great!), and one of the
| items left sort of open was exactly where the iptables rules should be
| placed in order to have them run at startup time.
| I think the suggested place for them was in /etc/rc/ directory in either
| rc.sysinit or rc.local.
|
| Does anyone have a definitive thought about where to place them?
|
| I am asking because I believe there is a window of vulnerability
| if networking is brought but the iptables rules are not activated
| until sometime after that.
|
| Thoughts anyone ?
|

Easiest way to save IPTABLES is as follows:

Run your IPTables script once.

Then - run service iptables save. This saves the rules to
/etc/sysconfig/iptables (with the iptables-save command).

Then chkconfig iptables on.

Now iptable starts when other services start during runlevels 2-5 and you
didn't just reinvent Red Hat's wheel :-)

- -Rick
- --
Rick Johnson, RHCE - [EMAIL PROTECTED]
Linux/WAN Administrator - Medata, Inc.
PGP Public Key: https://mail.medata.com/pgp/rjohnson.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Signed or encpryted for everyone's protection.

iEYEARECAAYFAj3ajeIACgkQIgQdhlSHZgNQHgCglaRTNrqpckbWUs8HepiarafV
h3QAoJUO5vhiCif42/yH4DsxP1GOBZZZ
=FCZZ
-----END PGP SIGNATURE-----



--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to