On 07/20/2015 11:47 AM, Gordon Messmer wrote:
On 07/20/2015 09:59 AM, jd1008 wrote:
So, where should I place the ruleset file /etc/sysconfig/iptables so that when iptables.service is started, the ruleset I want is what is used?
That's the place for it. Run "/usr/libexec/iptables/iptables.init start" in a terminal and see if there is any useful output. Or look at the log:
journalctl _SYSTEMD_UNIT=iptables.service
-- Logs begin at Sun 2015-07-19 07:54:40 DST, end at Mon 2015-07-20 11:52:52 DST. -- Jul 20 10:12:30 localhost.localdomain iptables.init[607]: iptables: Applying firewall rules: [ OK ] Jul 20 10:13:16 localhost.localdomain iptables.init[676]: iptables: Flushing firewall rules: [ OK ] Jul 20 10:13:16 localhost.localdomain iptables.init[676]: iptables: Setting chains to policy ACCEPT: filter [ OK ]
Sheesh!!!
These are NOT what I have in /etc/sysconfig/iptables at all!!!