iptables problem

smart_shell · 11-03-2010, 02:09 AM

Hi, is there different between iptables-save and /etc/init.d/iptables save ?
and net.ipv4.ip_forward =1 echo 1 > /proc/sys/net/ipv4/ip_forward
thnx.

estabroo · 11-03-2010, 04:33 AM

yes, iptables-save you need to redirect to a file, whereas /etc/init.d/iptables save (if you have one) saves it to a particular place

net.ipv4.ip_forward=1 is typically in a sysctl.conf file and generally restores forwarding after reboots, whereas echo 1> /proc/sys/net/ipv4/ip_forward is just a temporary turn on of forwarding that won't persist across reboots

smart_shell · 11-03-2010, 04:51 AM

Quote:

Originally Posted by estabroo

yes, iptables-save you need to redirect to a file, whereas /etc/init.d/iptables save (if you have one) saves it to a particular place

net.ipv4.ip_forward=1 is typically in a sysctl.conf file and generally restores forwarding after reboots, whereas echo 1> /proc/sys/net/ipv4/ip_forward is just a temporary turn on of forwarding that won't persist across reboots

if i did stop firewall script from /etc/init.d/iptables stop
and launch my own fw.sh after it i will do save from /etc/init.d/iptables save/ it make my start default iptables rules from fw.sh