Saving - Red Hat ENTERPRISE LINUX 3 Reference Manual

262
17.5.
iptables
There are two basic methods for controlling
Security Level Configuration Tool (
•
face for creating, activating, and saving basic firewall rules. For more information about how to use
this tool, refer to the chapter titled Basic Firewall Configuration in the Red Hat Enterprise Linux
System Administration Guide.
• /sbin/service iptables
activating, deactivating, and performing other functions of
in the command with one of the following directives:
option
— If a firewall is configured (meaning
start
•
ning
iptables
command. The
— If a firewall is running, the firewall rules in memory are flushed, and all iptables modules
stop
•
and helpers are unloaded.
If the
IPTABLES_SAVE_ON_STOP
configuration file is changed from its default value to
to
/etc/sysconfig/iptables
/etc/sysconfig/iptables.save
Refer to Section 17.5.1
the
iptables-config
— If a firewall is running, the firewall rules in memory are flushed, and the firewall
restart
•
is started again if it is configured in
only work if the
If the
/etc/sysconfig/iptables-config
, current rules are saved to
yes
to the file
/etc/sysconfig/iptables.save
Refer to Section 17.5.1
the
iptables-config
— Prints to the shell prompt the status of the firewall and a list of all active rules. If no
status
•
firewall rules are loaded or configured, it indicates this fact.
A listing of active rules containing domain and hostnames within rules lists unless
the default value for
/etc/sysconfig/iptables-config
Control Scripts Configuration File for more information about the
— Flushes all firewall rules. The policy of all configured tables is set to
panic
•
— Saves firewall rules to
save
•
Section 17.4 Saving
Tip
To use the same initscript commands to control netfilter for IPv6, substitute
in the
/sbin/service
refer to Section 17.6
Control Scripts
redhat-config-securitylevel
option
are stopped completely and then started using the
directive will only work if the
start
directive within the
Control Scripts Configuration File for more information about
iptables
file.
/etc/sysconfig/iptables
kernel module is not loaded.
ipchains
IPTABLES_SAVE_ON_RESTART
/etc/sysconfig/iptables
Control Scripts Configuration File for more information about
iptables
file.
IPTABLES_STATUS_NUMERIC
/etc/sysconfig/iptables
Rules for more information about saving firewall rules.
iptables
commands listed in this section. For more information about IPv6 and netfilter,
and IPv6.
ip6tables
under Red Hat Enterprise Linux:
iptables
— A command issued by the root user capable of
iptables
/etc/sysconfig/iptables
ipchains
/etc/sysconfig/iptables-config
and any existing rules are moved to the file
.
configuration file is changed from its default value to
.
configuration file. Refer to Section 17.5.1
Chapter 17.
) — A graphical inter-
via its initscript. Replace
exists), all run-
/sbin/iptables-restore
kernel module is not loaded.
, current rules are saved
yes
. The
restart
directive within
and any existing rules are moved
is changed to
yes
iptables-config
DROP
using
iptables-save
ip6tables
iptables
directive will
the
within the
iptables
file.
.
. Refer to
for
iptables