iptables resets

gizza23 · 07-08-2005, 11:12 PM

Hello,
I have questions concerning iptables. I have time and time again tried to configure and save the changes that I have made to iptables. Although i havebeen through this many times, these new reconfigurations never save. I do notice that a new chain named RH-Firewall01-INPUT has appeared as an alias. But for what chains is my question. Take linuxquestions.org example on iptables. I have used these two entries before:

Code:

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

And...

Code:

iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

I've saved using iptables-save, yet after a restart I get this:

Code:

[root@mun-175-161 ~]# iptables --list
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     ipv6-crypt--  anywhere             anywhere
ACCEPT     ipv6-auth--  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:5353
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:telnet
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:smtp
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
[root@mun-175-161 ~]#

Please avise.

mhallbiai · 07-08-2005, 11:19 PM

Code:

service iptables save

this will save the iptables with all current rules (the ones you added) to /etc/sysconfig/iptables

iptables-save without any option prints to stdout, you can redirect it to a file (iptables-save > /tmp/saved-iptables-to-file)

as far as the RH-Firewall-1-INPUT chain created, anything on INPUT or FORWARD is jumped to the RH-Firewall-1-INPUT chain . its an easy way to apply the same rules to more than one chain (in this case input/forward)

hope this helps

[EDIT:corrected RH-Firewall-1-INPUT references]

gizza23 · 07-09-2005, 10:25 AM

That was just the command that I needed mhallbiai! I appreciate the time you took to answer my questions. Thank you!