system-config-security and custom iptable rules, where?

abolishtheun · 05-25-2009, 12:15 AM

Fedora and Redhat folks,
When writing custom iptable rules, where do you place them and how do you make it coexist with the rules created by system-config-security? do you disable it completely? Where is the correct place to restore your rules after a reboot?

FragInHell · 05-25-2009, 01:39 AM

To save your rules /etc/init.d/iptables save. This will add your rules to the rule set and ensure they are re-loaded on system boot.
So add your rules as normal and when finished save them. Never used system-config-security so not sure, but I would take a backup of the configuration file just in case. Check /etc/init.d/iptables for the config file.

archtoad6 · 06-18-2009, 10:49 AM

AFAIK, iptables does not have a config file per se; instead custom iptables rules are implemented by a script. This script must then be stored w/ the other initialization scripts in the appropriate directory on your system.

The "book" can be found at:
http://iptables-tutorial.frozentux.n...-tutorial.html

chrism01 · 06-18-2009, 06:39 PM

For RH systems,

service iptables save

stores the rules in /etc/sysconfig/iptables. I recommend taking a backup before editing, and leave a root xterm open so you can put it back.