Stefan Srdic <[EMAIL PROTECTED]> wrote:
> I noticed the nice ipchains script in the init.d directory. It's
> supposed to read a ruleset and activate or deactivate ipchains whenever
> you switch runlevels.
> 
> I want to make that script read my current firewall/masq'ing script. I
> noticed how the ipchains script in /etc/rc.d/init.d allows you to point
> out your current ruleset. I tried to use my current ipchains script but
> always get the following error:
> 
> [root@edtn007632 init.d]# ./ipchains start
> Flushing all current rules and user defined chains:        [  OK  ]
> Clearing all current rules and user defined chains:        [  OK  ]
> Applying ipchains firewall rules: Try `/sbin/ipchains -h' or
> '/sbin/ipchains --help' for more information.
> ipchains command echo -n "Configuring packet filtering policies... "
> failed
> This is /sbin/ipchains-restore v1.1.2
> If this is the latest version of ipchains-restore, and the input
> was created using the latest version of ipchains-save, then I'd
> really appreciate a bug report. Please send the input you used,
> and all the output from this program to the author,
> `[EMAIL PROTECTED]' with `BUG-REPORT' in the subject
> line so I know to read the message.
> 
> I could'nt find any documentation on this ipchains script, am I using a
> wrong format to define my IP rules?
> 
> Stef
> 

(I don't usually leave all the text in my reply, but this time I will...)

I'd guess that the ipchains script in the init.d directory is trying to
use the results of the 'save ruleset' option (Sorry, I cannot find it
in the ipchains man page, must have been in one of the howtos!), not
an actual script.  I cannot find any more ... wait, there it is - 
ipchains-save and ipchains-restore.  They are scripts, see the
ipchains-howto for more info...

So, now that I've wandered around the map, here's the point:

I don't have a nice ipchains script in my init.d dir, so will have to
ask - does it use ipchains-restore?  If so, then you'll have to save
the state of your ipchains with ipchains-save.

rc


Rusty Carruth          Email:     [EMAIL PROTECTED] or [EMAIL PROTECTED]
Voice: (480) 345-3621  SnailMail: Schlumberger ATE
FAX:   (480) 345-8793             7855 S. River Parkway, Suite 116
Ham: N7IKQ @ 146.82+,pl 162.2     Tempe, AZ 85284-1825

Reply via email to