IPTables

[Phil Brammer]

Is it just me or is /etc/rc.d/init.d/iptables wrong?

I'm using the last release before Core 1 became production, but I suspect nothing's changed -- I hope I'm wrong.

Anyone having issues with this script as a result of the first few lines?

IPTABLES=/sbin/iptables
IPTABLES_DATA=/etc/sysconfig/$IPTABLES
IPTABLES_CONFIG=/etc/sysconfig/${IPTABLES}-config
IPV=${IPTABLES%tables} # ip for ipv4 | ip6 for ipv6
PROC_IPTABLES_NAMES=/proc/net/${IPV}_tables_names
VAR_SUBSYS_IPTABLES=/var/lock/subsys/$IPTABLES

So, let me get this straight.  I'm supposed to create the file /etc/sysconfig/sbin/iptables-config so that this script will have the appropriate rules to apply?  That's just goofy.

How about:
IPTABLES=iptables

Does /sbin even need to be specified at all?  I know I'd prefer to just have the file /etc/sysconfig/iptables-config, but perhaps that's just me.

Thoughts?  I know I'd like to see the default script be a little more clean, epecially when I'd expect the config file to be found under /etc/sysconfig and not under /etc/sysconfig/sbin.

Phil
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040108/fba7ff55/attachment-0001.sig>