LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Need help restoring iptables rules made by firestarter (https://www.linuxquestions.org/questions/linux-software-2/need-help-restoring-iptables-rules-made-by-firestarter-709312/)

Thaidog 03-05-2009 02:20 AM

Need help restoring iptables rules made by firestarter
 
I have some detailed rules that are made by the program Firestarter:

http://www.tyler.mcadams.com/iptables.txt

When Firestarter is started the rules look like they do above but Firestarter does not want to start with the system and the rules get flushed at reboot.

I want to use the rules made be Firestarter but when I do iptables-restore > iptables.txt the rules look different:

[root@Fedora tylerm]# iptables-save
# Generated by iptables-save v1.4.1.1 on Thu Mar 5 03:18:08 2009
*nat
:PREROUTING ACCEPT [26:8300]
:POSTROUTING ACCEPT [1:44]
:OUTPUT ACCEPT [1:44]
COMMIT
# Completed on Thu Mar 5 03:18:08 2009
# Generated by iptables-save v1.4.1.1 on Thu Mar 5 03:18:08 2009
*mangle
:PREROUTING ACCEPT [26:8300]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:44]
:POSTROUTING ACCEPT [1:44]
COMMIT
# Completed on Thu Mar 5 03:18:08 2009
# Generated by iptables-save v1.4.1.1 on Thu Mar 5 03:18:08 2009
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:44]
COMMIT
# Completed on Thu Mar 5 03:18:08 2009

################################################3

The firewall is down like this - any suggestions?

unSpawn 03-05-2009 02:40 AM

Quote:

Originally Posted by Thaidog (Post 3465476)
I want to use the rules made be Firestarter but when I do iptables-restore > iptables.txt the rules look different

Run 'iptables-restore < iptables.txt'?

Thaidog 03-05-2009 03:48 AM

Quote:

Originally Posted by unSpawn (Post 3465493)
Run 'iptables-restore < iptables.txt'?

[root@Fedora tylerm]# iptables-restore < iptables.bak

[root@Fedora tylerm]# iptables-save

# Generated by iptables-save v1.4.1.1 on Thu Mar 5 04:48:06 2009
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [4342:699895]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -p icmp -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Thu Mar 5 04:48:06 2009


I think I just mistyped that. my bad.


All times are GMT -5. The time now is 02:09 PM.