Adding an iptables script to boot

outshined · 09-22-2006, 01:37 PM

Howdy, I'm wondering what is the best solution to add a command line to startup? I'm using FC5.

Here is the line :

Code:

iptables -t nat -A PREROUTING -s 192.168.0.0/255.255.255.0 
         -p tcp -m tcp --dport 80 -j REDIRECT --to-port 3128

-First option

Use iptables-save to save current state. Does it loads back by itself?

-Second option

Put the script into /etc/rc.d/init.d/scriptname
chmod 755
Then add a link into /etc/rc.d/rc3.d/S09scriptname

Just not sure which one to use.

Thanks

ralvez · 09-22-2006, 02:00 PM

The second option is the most appropriate one.

outshined · 09-22-2006, 02:29 PM

And what will happen in case there is an error in the script? will boot keep going?

bio_informatics · 09-22-2006, 02:47 PM

just add the rule to iptables

and in order to save the current state of iptables, which will be load on startup use

service iptables save

.

michaelk · 09-22-2006, 02:50 PM

You can add the lines to the /etc/rc.local if you do not want to worry about rc.d scripts. rc.local is the last to run and it is independent of runlevel.

If you use "service iptables save" when the system reboots and the iptables script runs it will reload the saved rules.

Your PC will keep booting if there is an error.