Re: Howto for Firewall on RedHat 7.x

[Matt Drew <mdrew redhat com>]

I've been working on this in my spare time -- I'll post what I've got for
you tonight when I get home.

The basics are this:

/etc/rc.d/init.d/ipchains is a startup script with control functionality
for the "service" command -- I would leave it alone.  For example, now you
can do:

service ipchains status
service ipchains start
service ipchains stop
..
etc

and control the firewall manually from there.  The configuration is stored
in /etc/sysconfig/ipchains, but the format is the ipchains-save format,
which is a bit different from a firewall script.  What I ended up doing
for my test iptables setup was building the firewall script that I wanted,
storing it in /etc/sysconfig as iptables.sh, and then running:

service iptables stop
/etc/sysconfig/iptables.sh
service iptables save
service iptables start

Which clears all the tables (but leaves the modules loaded), inputs my
rules, saves them, and then starts the firewall with them.  You *should*
be able to do the same thing with ipchains.  In fact, the ipchains-save
and iptables-save output is actually quite revealing and useful as a
troubleshooting tool for making sure your firewall is set up properly.


Matt

On Fri, 30 Mar 2001, Edward Nainggolan wrote:

> Dear All,
>
> I usually use redhat 6.x with ipchains as firewall.
> With this, I can easily add the lists of ipchains command to the
> /etc/rc.d/init.d/firewall, so it can start/stop automaticly.
>
> But after I change to Redhat 7.x, the configuration very different,
> I can't add manually ipchains command-line in that firewall.
>
> Please help me, i want to know how to configure ipchains in the
> Redhat 7.x
>
>
> Regards
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>
>
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list
>

-- 
Matt Drew
Peer Review team lead and Bughunter
Red Hat Consumer Services