iptables help

[angelo l]

Jessica,
What you have to do to make this work is, edit the /etc/init.d/iptables 
file.
When done, type:
iptables-save > /etc/sysconfig/iptables

Which will populate the /etc/sysconfig/iptables file, then type service 
iptables restart, and you're in business :-)



~----------------------/\-----------------------~
Angelo H. Lagos, MCP, MCPI, MCSE
Active member "170 MPH Club"
Microsoft Certified Systems Engineer/WebMaster/Web Developer
"...not all super heroes wear a cape...some ride a Suzuki GSX1300R..."




----Original Message Follows----
From: Jessica Zhu <jessica at mathforum.org>
Reply-To: General Red Hat Linux discussion list <redhat-list at redhat.com>
To: golharam at umdnj.edu,General Red Hat Linux discussion list 
<redhat-list at redhat.com>
Subject: RE: iptables help
Date: Fri, 13 May 2005 16:19:20 -0400 (EDT)
MIME-Version: 1.0
Received: from hormel.redhat.com ([209.132.177.30]) by mc5-f24.hotmail.com 
with Microsoft SMTPSVC(6.0.3790.211); Fri, 13 May 2005 13:19:34 -0700
Received: from listman.util.phx.redhat.com (listman.util.phx.redhat.com 
[10.8.4.110])by hormel.redhat.com (Postfix) with ESMTPid 374BA72F38; Fri, 13 
May 2005 16:19:28 -0400 (EDT)
Received: from int-mx1.corp.redhat.com 
(int-mx1.corp.redhat.com[172.16.52.254])by listman.util.phx.redhat.com 
(8.12.11/8.12.10) with ESMTP idj4DKJNox006558 for 
<redhat-list at listman.util.phx.redhat.com>;Fri, 13 May 2005 16:19:23 -0400
Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31])by 
int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id j4DKJMO25921for 
<redhat-list at redhat.com>; Fri, 13 May 2005 16:19:22 -0400
Received: from support1.mathforum.org (home-2.mathforum.org 
[144.118.94.18])by mx1.redhat.com (8.12.11/8.12.11) with ESMTP id 
j4DKJLk0027581for <redhat-list at redhat.com>; Fri, 13 May 2005 16:19:21 -0400
Received: from support1-2.mathforum.org 
(support1-2.mathforum.org[144.118.94.12])by support1.mathforum.org 
(8.11.6/8.11.6/The Math Forum, $Revision: 1.9primary) with ESMTP id 
j4DKJKh31272; Fri, 13 May 2005 16:19:20 -0400
X-Message-Info: EoYTbT2lH2PORwEVOG/f7J2iwr7tFxJRMp/NikYcg7w=
X-RedHat-Spam-Score: 0
X-loop: redhat-list at redhat.com
X-BeenThere: redhat-list at redhat.com
X-Mailman-Version: 2.1.5
Precedence: junk
List-Id: General Red Hat Linux discussion list <redhat-list.redhat.com>
List-Unsubscribe: 
<https://www.redhat.com/mailman/listinfo/redhat-list>,<mailto:redhat-list-request at redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/redhat-list>
List-Post: <mailto:redhat-list at redhat.com>
List-Help: <mailto:redhat-list-request at redhat.com?subject=help>
List-Subscribe: 
<https://www.redhat.com/mailman/listinfo/redhat-list>,<mailto:redhat-list-request at redhat.com?subject=subscribe>
Errors-To: redhat-list-bounces at redhat.com
Return-Path: redhat-list-bounces at redhat.com
X-OriginalArrivalTime: 13 May 2005 20:19:35.0004 (UTC) 
FILETIME=[145D01C0:01C557F9]

Thanks, I did that in my new file already.

Another question is whether there is nice rule to protect the servers from
DoS. Since this is also our mail server, is there any way to reject spam
through firewall.

Jessica

On Fri, 13 May 2005, Ryan Golhar wrote:

 > I believe you have to have COMMIT as the last line of your
 > /etc/sysconfig/iptables.  This is commit the changes.
 >
 > Ryan
 >
 >
 > -----Original Message-----
 > From: redhat-list-bounces at redhat.com
 > [mailto:redhat-list-bounces at redhat.com] On Behalf Of Jessica Zhu
 > Sent: Friday, May 13, 2005 3:12 PM
 > To: redhat-list at redhat.com
 > Subject: iptables help
 >
 >
 > Hi,
 >
 > I tried to customize and set up firewall using iptables on Red Hat
 > Enterprise Linux ES release 3. The file /etc/sysconfig/iptables got
 > edited. After I finished editing, I restarted service using
 > /etc/init.d/iptables restart or service iptables restart. However,
 > though
 > it's got successfully restarted, when I checked the status, none of my
 > editing taking effection.
 > It's weired. For example, the default chain INPUT, OUTPUT and FORWARD
 > all
 > are ACCEPT, down in new iptables I edited, it's like as follows,
 >
 > *filter
 > :INPUT DROP
 > :FORWARD DROP
 > :OUTPUT ACCEPT [0:0]
 >
 > But nothing take effection after iptables got restarted. What happened?
 >
 > Jessica
 >
 >

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list