LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   RHat 8 IPTables (https://www.linuxquestions.org/questions/linux-networking-3/rhat-8-iptables-47201/)

mrbuzz 02-26-2003 04:35 AM

RHat 8 IPTables
 
I looked at the IPTables file and there are some specific RHAT prefaced commands in this file. It doesn't seemt be standard IPTable commands.
I used Lokkit to generate the commands.

Will RH 8 use "standard" IPTable commands?

Also, I noticed in my system services that IPChains and IPTable are both enabled for my runlevel. My understanding is that RHat 8 doesn't use IPChains at all so I don't know why this is even in there as a service and enabled..

Do I need to disable IPChains? And while these two were running, which one got precedence? (if IPChains was really running at all)

I'm trying to get workstations on the LAN access to the Internet. I want to use the RHat 8 box is used as a firewall/router. Any tutorials/suggestions/comments welcome.

siddiqu 02-26-2003 05:29 AM

Hi..

Check iptables howto in samba.org

Ipchains command support may be available. but by default it will use iptables

Siddiqu.T

SlickWilly 02-26-2003 02:41 PM

Um... May I slip in a preface here :

<-- 'In Redhat 8' --> by default it will use iptables.

In redhat 7.x it certainly doesn't. I'm not even entirely sure about 8, but I bow to your wisdom on that one....

There's an easy way to check to see which is running :

iptables -L

If it shows a list of rules, you have tables running. If it complains about your kernel not being capable, you probably have chains running.

The two are mutually exclusive and you won't be able to have both...

I don't know of which Redhat specific commands you talk, but if I recall correctly there are none.

Slick.

mychl 02-26-2003 04:52 PM

Yes, redhat 8 will accept 'regular' or non-redhat specific iptables commands.

I've been running my own script for a while now..... just put it in /etc/init.d/iptables and you'll be all set.....

peter_robb 02-27-2003 07:14 AM

Some clarity...

RH8 will install both ipchains & iptables, & make them both active in rc.d. For backward compatability in upgrades etc.

What won't happen is both running at the same time...
Each init script, /etc/rc.d/init.d/iptables & ipchains, refer to files in /etc/sysconfig.
If the files aren't there, the service won't start, and only an iptables file is installed by default.

To see which is running, type 'lsmod' and look for iptables or ipchains modules. iptables won't start if any ipchains modules are loaded, to avoid conflicts.

/etc/sysconfig/iptables is a file created from the iptables-save command and is in a special format. Don't work on this file!!

The Lokkit programme is buggy (that's as polite as I can be)
A lot of members here are using Firestarter. Give it a good look.
A good iptables tutorial is http://iptables-tutorial.frozentux.n...-tutorial.html

If you want to remove ipchains, do
chkconfig --level 2345 ipchains off
rpm -e ipchains


All times are GMT -5. The time now is 07:16 PM.