Running: systemctl enable iptables.service systemctl start iptables.service
sets totally permissive rules, and does not incorporate any of the rules in the file /etc/sysconfig/iptables
So, I have to manually run
iptables-restore < /etc/sysconfig/iptables
So, where should I place the ruleset file /etc/sysconfig/iptables so that when iptables.service is started, the ruleset I want is what is used?
On 07/20/2015 09:59 AM, jd1008 wrote:
So, where should I place the ruleset file /etc/sysconfig/iptables so that when iptables.service is started, the ruleset I want is what is used?
That's the place for it. Run "/usr/libexec/iptables/iptables.init start" in a terminal and see if there is any useful output. Or look at the log:
journalctl _SYSTEMD_UNIT=iptables.service
On 07/20/2015 11:47 AM, Gordon Messmer wrote:
On 07/20/2015 09:59 AM, jd1008 wrote:
So, where should I place the ruleset file /etc/sysconfig/iptables so that when iptables.service is started, the ruleset I want is what is used?
That's the place for it. Run "/usr/libexec/iptables/iptables.init start" in a terminal and see if there is any useful output. Or look at the log:
journalctl _SYSTEMD_UNIT=iptables.service
-- Logs begin at Sun 2015-07-19 07:54:40 DST, end at Mon 2015-07-20 11:52:52 DST. -- Jul 20 10:12:30 localhost.localdomain iptables.init[607]: iptables: Applying firewall rules: [ OK ] Jul 20 10:13:16 localhost.localdomain iptables.init[676]: iptables: Flushing firewall rules: [ OK ] Jul 20 10:13:16 localhost.localdomain iptables.init[676]: iptables: Setting chains to policy ACCEPT: filter [ OK ]
Sheesh!!!
These are NOT what I have in /etc/sysconfig/iptables at all!!!
On 07/20/2015 12:37 PM, Gordon Messmer wrote:
On 07/20/2015 10:55 AM, jd1008 wrote:
These are NOT what I have in /etc/sysconfig/iptables at all!!!
Is there more than one service setting firewall rules on your system? Because iptables.service is deprecated, you probably also need to disable firewalld.
Thanx. Did that. Is firewalld similar to fbsd's firewall app as far as rulesets are concerned?