Re: [CentOS] iptables default configuration

2010-01-19 Thread Kai Schaetzl
Carlos Santana wrote on Mon, 18 Jan 2010 17:54:51 -0600: - The wiki page approach is to flush existing rules and then add required rules to iptables. Is it possible to add/append required rules without flushing existing set of rules You can add rules on-the-fly at runtime and then use service

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 1:01 AM, Ian Blackwell i...@ikel.id.au wrote: Rob Kampen wrote: Carlos Santana wrote: - What does 'RH-Firewall-1-INPUT' chain means? This also seems to be a predefined chain, although not mentioned in wiki. - The wiki page approach is to flush existing rules and then

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 7:31 AM, Kai Schaetzl mailli...@conactive.com wrote: Carlos Santana wrote on Mon, 18 Jan 2010 17:54:51 -0600: - The wiki page approach is to flush existing rules and then add required rules to iptables. Is it possible to add/append required rules without flushing

Re: [CentOS] iptables default configuration

2010-01-19 Thread Kai Schaetzl
Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: 'But it's harder to maintain as a script of your own.'. You are also using script, right? The as is ambiguous in this case ;-) Read: But it's (adding on the fly, no script) harder to maintain as if you use a script of your own. Kai --

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 1:31 PM, Kai Schaetzl mailli...@conactive.com wrote: Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: 'But it's harder to maintain as a script of your own.'. You are also using script, right? The as is ambiguous in this case ;-) Read: But it's (adding on the

Re: [CentOS] iptables default configuration

2010-01-19 Thread Ron Loftin
On Tue, 2010-01-19 at 14:32 -0600, Carlos Santana wrote: On Tue, Jan 19, 2010 at 1:31 PM, Kai Schaetzl mailli...@conactive.com wrote: Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: 'But it's harder to maintain as a script of your own.'. You are also using script, right? The

Re: [CentOS] iptables default configuration

2010-01-18 Thread Rob Kampen
Carlos Santana wrote: Hi, I would like to get some inputs on how to configure iptables. I have referred to CentOS wiki http://wiki.centos.org/HowTos/Network/IPTables and it has been very helpful. I have configured iptables with the help of this tutorial, but I haven't understood few things

Re: [CentOS] iptables default configuration

2010-01-18 Thread Ian Blackwell
Rob Kampen wrote: Carlos Santana wrote: - What does 'RH-Firewall-1-INPUT' chain means? This also seems to be a predefined chain, although not mentioned in wiki. - The wiki page approach is to flush existing rules and then add required rules to iptables. Is it possible to add/append required