to save iptables in suse

venki · 06-21-2007, 07:09 AM

Hi all,

I am using suse-10.2.
I wrote an rule to block gmail.com (https--443)
iptables -I OUTPUT -p tcp --dport 443 -d gmail.com -j REJECT
it is blocking perfectly.
but when i am rebooting it is flushing.
plz help me to save this rule permanently

I googled it but they are given only for redhat.
there is no /etc/init.d/iptables, /etc/init.d/rc.local
so i cannot start service

thks and regards

rossonieri#1 · 06-21-2007, 07:49 AM

hi venki,

SuSE iptables based on script /etc/sysconfig/SuSEfirewall2 -- so can you script?
or for the manual loading - just put your command in /etc/init.d/boot.local

HTH,
cheers.

venki · 06-22-2007, 05:04 AM

Hi,
thks for replying !
but there is no use
whn i am rebooting all the rules are flushing!
i have stored my rule in /etc/init.d/boot.local

still no use!
plz help me

rs_vijay · 06-28-2007, 07:54 AM

hi venki,

i didn't use suse ever but try if there is /etc/rc.d/rc.[0-6].d and if it exists u can just put up that rule in a script in rc3.d or rc5.d directory as appropriate so that it would get executed at every reboot..
plzz correct me if i'm wrong..

vijay,
cheers.

venki · 07-04-2007, 02:39 AM

hi vijay, there is no use..still not saving!
whn we are restarting all the rules are flushing

rs_vijay · 07-06-2007, 07:49 AM

hi venki,
i use fc5 and in my /etc/rc.d/rc3.d ( i use runlevel 3 ) a file starting with 'S' is executed , the stated service is started..
so u can do this:

Code:

             (as root)
 $ echo "/sbin/iptables -I OUTPUT -p tcp --dport 443 -d gmail.com -j REJECT" > /etc/rc.d/rc3.d/S34block_gmail.com
 $ chmod +x /etc/rc.d/rc3.d/S34block_gmail.com # Add execute permission

"iptables" generally resides in /sbin and i think since root isn't logged in PATH isn't created , so we should specify complete path to execute it..
i think now on rebooting it should work..
plzz correct me if i am wrong..

cheers,
vijay

venki · 07-09-2007, 12:54 AM

hi vijay! still no use!! i donno what is happening! but whn i restarted the system all rules are flushing!!