ipcop + custom iptables rule

kurrupt · 12-08-2006, 11:13 PM

Hey guys, iam currently running IPCop as my firewall, and i created a custom rule on the system to block some outgoing connections.

What iam trying to figure out his how ipcop saves the rules? it does not have the standard /etc/init.d/iptables save procedure.

Anyone know how IPCOP saves the table rules?

Thanks.

win32sux · 12-09-2006, 08:55 AM

never used ipcop, but any linux distro should be able to save iptables configuration with a:

Code:

iptables-save > /path/to/somewhere/myrules.txt

then it's just a matter of adding a:

Code:

iptables-restore < /path/to/somewhere/myrules.txt

to the appropriate startup file (optimally you'd want this to happen before your network is brought online)...

EDIT: actually, after some thought, this is probably not what you are looking for... i say this because it would be redundant when whatever ipcop normally does kicks in... your box would be loading the ipcop iptables config, and then iptables-restore would be replacing it with the same thing plus your rules...

if you're looking to just have some rules run independantly of whatever ipcop is doing i'd suggest adding them to an rc.local or something like that... that way you know your rules will get executed after ipcop's normal procedure has finished...

BTW, grepping your startup scripts for the string "iptables-restore" will probably shed some light as to where ipcop stores it's iptables config...

kurrupt · 12-09-2006, 05:41 PM

ya i totally agree with you, I know all the commands to save, export, restore etc.. for iptables but it seems the makers of IPCop stripped it down to the bone, those commands do not exist on the system anymore.

They seem to have a different way of importing/saving the rules on the system, and i cannot pinpoint it