-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 19 Nov 2002 13:13:15 -0500, [EMAIL PROTECTED] wrote:

> On Tue, Nov 19, 2002 at 09:54:43AM -0500, Matthews, John wrote:
> > I believe firewall rules are sometimes kept in
> > /etc/sysconfig/firewall, so you might want to read the contents of
> > that file too and ensure you don't have rules being set there.
> 
> I just set up iptables on my cable cnxn (Works great!), and one of the
> 
> items left sort of open was exactly where the iptables rules should be
> placed in order to have them run at startup time.
> I think the suggested place for them was in /etc/rc/ directory in
> either rc.sysinit or rc.local. 
> 
> Does anyone have a definitive thought about where to place them?
> 
> I am asking because I believe there is a window of vulnerability
> if networking is brought but the iptables rules are not activated
> until sometime after that.
> 
> Thoughts anyone ?


/etc/sysconfig/iptables

This is from where the "iptables" SysV initscript service loads them
before enabling networking.

  # service iptables save

will save your loaded rules to /etc/sysconfig/iptables.

  # chkconfig iptables on
  
will enable the iptables service for current run-level, so the rules
will be loaded upon next reboot.

  # service iptables stop

will flush the loaded rules.

  # service iptables start
  # service iptables restart
  
will load them just like a reboot.

- -- 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE92ogy0iMVcrivHFQRAvu3AJwM+kVzVg+N4bU4Lxcu3Jp+z4N0OACdEA9N
02tEm1UnPv7Pjk1VvgoKYXE=
=Rwn5
-----END PGP SIGNATURE-----



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to