iptables help

[Jessica Zhu]

Thanks, I did that in my new file already.

Another question is whether there is nice rule to protect the servers from 
DoS. Since this is also our mail server, is there any way to reject spam 
through firewall.

Jessica

On Fri, 13 May 2005, Ryan Golhar wrote:

> I believe you have to have COMMIT as the last line of your
> /etc/sysconfig/iptables.  This is commit the changes.
> 
> Ryan
> 
> 
> -----Original Message-----
> From: redhat-list-bounces at redhat.com
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Jessica Zhu
> Sent: Friday, May 13, 2005 3:12 PM
> To: redhat-list at redhat.com
> Subject: iptables help
> 
> 
> Hi,
> 
> I tried to customize and set up firewall using iptables on Red Hat 
> Enterprise Linux ES release 3. The file /etc/sysconfig/iptables got 
> edited. After I finished editing, I restarted service using 
> /etc/init.d/iptables restart or service iptables restart. However,
> though 
> it's got successfully restarted, when I checked the status, none of my 
> editing taking effection. 
> It's weired. For example, the default chain INPUT, OUTPUT and FORWARD
> all 
> are ACCEPT, down in new iptables I edited, it's like as follows,
> 
> *filter
> :INPUT DROP
> :FORWARD DROP
> :OUTPUT ACCEPT [0:0]
> 
> But nothing take effection after iptables got restarted. What happened?
> 
> Jessica
> 
>