iptables script generated by bastille

rob_xx17 · 01-27-2006, 09:29 AM

Hey all.

I'm running SuSE 9.3 as a server. It runs great with no problems. I hardened it using Bastille. What I want to do is customize the 'iptables' script generated by Bastille; I want to include some things that Bastille didn't. Does anybody know where the script is or where I can find it? Thanks.

r.

unSpawn · 01-29-2006, 06:51 AM

Check the contents of your RPM. If it's a file or generated after running Bastille it'll probably be in /etc/Bastille.
Else you could iptables-save > /some/dir/file and have that executed by the "regular" firewall service.

rob_xx17 · 01-31-2006, 01:46 PM

thanks,

how do I have that file saved with 'iptables-save' executed by the "regular" firewall service? Thanks.

r.

unSpawn · 01-31-2006, 06:02 PM

Lame excuse, but I don't know how it's done in SuSE. Basically, if you do iptables-save > /some/dir/some/file, then edit the file, save then cat /some/dir/some/file | iptables-restore this *should* work. If it doesn't and none of the SuSE guru's drop by, you're not out of options. You could check your SuSE docs, search LQ or post in our SuSE forum, etc, etc.