Activating The Iptables Service - Red Hat ENTERPRISE LINUX 3 System Administration Manual

Chapter 20. Basic Firewall Configuration
you collect your mail from your ISP's server using POP3 or IMAP, or if you use a tool such
as
fetchmail
to use your server to send spam.
Click OK to save the changes and enable or disable the firewall. If Enable firewall was
selected, the options selected are translated to
/etc/sysconfig/iptables
activated immediately after saving the selected options. If Disable firewall was selected, the
/etc/sysconfig/iptables
The options selected are also written to the
file so that the settings can be restored the next time the application is started. Do not edit this file by
hand.
Even though the firewall is activated immediately, the
automatically at boot time, refer to Section 20.2 Activating the
20.2. Activating the
The firewall rules are only active if the
use the command:
/sbin/service iptables restart
To ensure that it is started when the system is booted, issue the command:
/sbin/chkconfig --level 345 iptables on
The service is not included in Red Hat Enterprise Linux. However, if
ipchains
stalled (for example, an upgrade was performed, and the system had
the service should not be activated along with the
ipchains
service is disabled and configured not to start at boot time, execute the following two
ipchains
commands:
/sbin/service ipchains stop
/sbin/chkconfig --level 345 ipchains off
The Services Configuration Tool can be used to enable or disable the
services.
. Note that an improperly configured SMTP server can allow remote machines
file. The
iptables
file is removed, and the
iptables
iptables
iptables
service is also started so that the firewall is
iptables
/etc/sysconfig/redhat-config-securitylevel
iptables
iptables
Service
service is running. To manually start the service,
iptables
commands and written to the
service is stopped immediately.
service is not configured to start
Service for details.
ipchains
previously installed),
ipchains
service. To make sure the
and
iptables
149
is in-
ipchains