On 7/27/14, 11:26 PM, Shawn Wells wrote:
From: Leland Steinke <leland.j.steinke.ctr@mail.mil>

Guidance did not remind users to reload firewall rules if a change was required

Signed-off-by: Leland Steinke <leland.j.steinke.ctr@mail.mil>
---
 RHEL/6/input/system/network/iptables.xml |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/RHEL/6/input/system/network/iptables.xml b/RHEL/6/input/system/network/iptables.xml
index 639b16e..0876645 100644
--- a/RHEL/6/input/system/network/iptables.xml
+++ b/RHEL/6/input/system/network/iptables.xml
@@ -73,6 +73,8 @@ the built-in INPUT chain which processes incoming packets,
 add or correct the following line in
 <tt>/etc/sysconfig/ip6tables</tt>:
 <pre>:INPUT DROP [0:0]</pre>
+If changes were required, reload the ip6tables rules:
+<pre>$ sudo service ip6tables reload</pre>
 </description>
 <ocil clause="the default policy for the INPUT chain is not set to DROP">
 If IPv6 is disabled, this is not applicable.
-- 1.7.1

ack