[CS-FSLUG] Firewall fights

Ed Hurst ehurst at asisaid.com
Wed Jan 25 10:59:24 CST 2006


Stephen J. McCracken wrote:
>>The rules for FreeBSD are based on IPFW, and I can't discern how to 
>>translate that to IPTables. The rules in CentOS are script-based, though 
>>hardly so involved as the SUSE Firewall2. There is no simple rule stack 
>>I can just copy over.
> 
> Actually, there is (it's just not obvious).  When any iptables firewall
> is running the rules are loaded in memory.
> 
> You can use the command "iptables-save" and it prints the currently
> loaded ruleset to standard out.  So with a quick "iptables-save >
> myrules.out" you have the rule stack saved and ready to move to another
> box.  There is an equivalent "iptables-restore" command to load such
> saved rulesets, so an "iptables-restore < myrules.out" will load the
> saved ruleset.

Okay, but be aware: If I have to boot CentOS, I'm not likely to switch 
back to Debian for a long time, if at all. This involves swapping out 
harddrives, no small task on my old Pavilion. With the work I'm doing 
right now while fussing over this firewall issue, I'm not inclined to 
play too awful much. The machine won't cooperate with Grub in booting 
from first one drive, then another. I've tried. Still, I'll follow your 
advice and see what comes of it.

Thanks.

-- 
Ed Hurst
----------
Bible Application - http://ed.asisaid.com/bible/index.html
Plain & Simple Computer Help - http://ed.asisaid.com/
Mission, Method & Means - http://ed.asisaid.com/blog/




More information about the Christiansource mailing list