Questions about iptables

David Eisner cradle at umd.edu
Fri Nov 7 22:09:09 UTC 2003


Just installed Fedora Core 1. First: thanks, it's quite nice.

Now the problem (skip to the end for the questions).
I used iptables to poke a hole through my firewall:  

  /sbin/iptables -A INPUT -s 192.168.167.166 -j ACCEPT.

This worked fine.  Then I used 
 
  /sbin/service iptables save

to save the settings.  However, when I reboot, I get an error:

---snip---
Applying iptables firewall rules: Bad argument `any'
Error occured at line: 11
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
[FAILED]
---snip---


I checked /etc/sysconfig/iptables, and this seems to be the bogus
line:

   -A RH-Firewall-1-INPUT -p icmp -m icmp any -j ACCEPT

If I instead /sbin/iptables-save > /etc/sysconfig/iptables, this seems 
to work.


Question 1: What's the correct way to save iptables with Fedora.

Question 2: Should I be adding my rule to the INPUT chain, or to the
            RH-Firewall-1-INPUT chain.


Thanks in advance.

-David


------------------------+--------------------------+
David Eisner            | E-mail: cradle at umd.edu   |
CALCE EPSC              | Phone:  301-405-5341     |
University of Maryland  | Fax:    301-314-9269     |
------------------------+--------------------------+






More information about the fedora-list mailing list