Re: some reality about iptables, please

[Bret Comstock Waldow <bwaldow@alum.mit.edu>]

Thank you for this.

My apologies to all for broadcasting my frustration.  It's not the best
way to handle things.

Bret

On Tue, 2003-08-26 at 23:14, Kevin Mark wrote:

> > Someone somewhere speaks to issue of the actual plumbing to implement
> > iptables.  Can anyone point me?
> <snip>
> you can read /etc/init.d/iptables comments for info.
> here is the short version:
> #clear out rules
> iptables -F
> #run script to load iptables rules into memory
> sh iptables.sh
> # make required directory? 
> mkdir /var/lib/iptables
> #save active rule set
> /etc/init.d/iptables save active
> #flush rules -- inactive rule set
> iptables -F
> #save inactive rules set
> /etc/init.d/iptables save inactive
> # enjoy rules  on next reboot or /etc/init.d/iptables start

-- 
bwaldow at alum dot mit dot edu