Hi sluggerrs
 
For some reason I cannot shut down iptables on redhat9.
It always.......... ("Resetting built-in chains to the default ACCEPT policy:    [  OK  ]" )............
resets to some unknown policy. (certainly not masquerading)
I force a "NAT" script which does the job OK.
 
I can't find any configuration file that may cause this behaviour.
 
I disabled it (chkconfig iptables off) and on next boot it is disabled.
I on occasions start it with a customised script ...........and when i shut  down iptables  it restarts to some other configuration and seems to have nasty results to routing commands.
 
I want to shut it down as it seems to interfere with routing to other networks... 192.168.x.x & 10.0.0.x 
 
Any idea how I can shut it down permanently?
 
I have opted to have NO firewall on "adsl-setup"
& haven't knowing set it for anything else including firewalling.
 
I can't see it in the  "ps" proccesses.
 
Many thanks
Roger
 
 
The full text to some commands is below.

 
[EMAIL PROTECTED] root]# /etc/rc.d/init.d/iptables stop
Flushing all chains:                                       [  OK  ]
Removing user defined chains:                              [  OK  ]
Resetting built-in chains to the default ACCEPT policy:    [  OK  ]

[EMAIL PROTECTED] root]# rpm -qa |gg pppoe
rp-pppoe-3.5-2

[EMAIL PROTECTED] root]# uname -r
2.4.20-31.9

[EMAIL PROTECTED] root]# sh -v   ipmasq.script

/sbin/iptables -F; iptables -t nat -F; iptables -t mangle -F
/sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT
/sbin/iptables -P INPUT DROP   #only if the first two are succesful
/sbin/iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT
 
[EMAIL PROTECTED] root]# rpm -qc rp-pppoe
/etc/ppp/firewall-masq
/etc/ppp/firewall-standalone
/etc/ppp/pppoe-server-options
 
 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to