Red Hat ENTERPRISE LINUX 4.5.0 Reference Manual page 363

activating, deactivating, and performing other functions of
in the command with one of the following directives:
<option>
• — If a firewall is configured (meaning
start
are stopped completely and then started using the
iptables
command. The
start
• — If a firewall is running, the firewall rules in memory are flushed, and all iptables
stop
modules and helpers are unloaded.
If the
IPTABLES_SAVE_ON_STOP
configuration file is changed from its default value to
/etc/sysconfig/iptables
/etc/sysconfig/iptables.save
Refer to Section 5.1, "
about the
iptables-config
• — If a firewall is running, the firewall rules in memory are flushed, and the firewall
restart
is started again if it is configured in
works if the
ipchains
If the
IPTABLES_SAVE_ON_RESTART
configuration file is changed from its default value to
/etc/sysconfig/iptables
/etc/sysconfig/iptables.save
Refer to Section 5.1, "
about the
iptables-config
• — Prints to the shell prompt the status of the firewall and a list of all active rules. If
status
no firewall rules are loaded or configured, it indicates this fact.
A listing of active rules containing IP addresses within rule lists unless the default value for
IPTABLES_STATUS_NUMERIC
/etc/sysconfig/iptables-config
output to domain and hostname information. Refer to
Scripts Configuration File"
• — Flushes all firewall rules. The policy of all configured tables is set to
panic
• — Saves firewall rules to
save
Section 4, "Saving
iptables
Tip
To use the same initscript commands to control netfilter for IPv6, substitute
ip6tables
directive only works if the
directive within the
and any existing rules are moved to the file
.
Control Scripts Configuration File"
iptables
file.
/etc/sysconfig/iptables
kernel module is not loaded.
directive within the
and any existing rules are moved to the file
.
Control Scripts Configuration File"
iptables
file.
is changed to
no
configuration file. This change would revert status
for more information about the
/etc/sysconfig/iptables
Rules" for more information.
for in the
iptables /sbin/service
iptables
via its initscript. Replace
iptables
/etc/sysconfig/iptables
/sbin/iptables-restore
kernel module is not loaded.
ipchains
/etc/sysconfig/iptables-config
, current rules are saved to
yes
. The
/etc/sysconfig/iptables-config
, current rules are saved to
yes
within the
Section 5.1, "
iptables-config
using
iptables-save
commands listed in this section.
Control Scripts
exists), all running
for more information
directive only
restart
for more information
Control
iptables
file.
.
DROP
. Refer to
339