Re: [CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-25 Thread Kenneth Porter
On Sunday, April 24, 2011 9:04 AM +0200 Alexander Farber alexander.far...@gmail.com wrote: If comments not possible, please share few tricks - how do YOU usually use iptables on CentOS, i.e. there is sudo service iptables save, but I've yet to discover its usefulness I keep related rules in

Re: [CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-25 Thread Geoff Galitz
assuming you are talking about /etc/sysconfig/iptables , hash is indeed the comment mark, and works fine. In my file on this system all comment lines have a hash as first character on the line though, so perhaps it doesn't like end-of-line comments but only accepts full lines of comment.

[CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-24 Thread Alexander Farber
Hello, I'm a user (and big fan) of CentOS 5.6 and in my /etc/sysconfig/iptables there are few blocking rules for some annoying visitors of my website (I run a card game there since many years and some people are special): *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [294:35064]

Re: [CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-24 Thread Nicolas Thierry-Mieg
Alexander Farber wrote: snip Is there a way to add comments to the iptables file? A hash mark # does not seem to work. assuming you are talking about /etc/sysconfig/iptables , hash is indeed the comment mark, and works fine. In my file on this system all comment lines have a hash as first

Re: [CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-24 Thread Alexander Farber
Ouch you're correct. I only tried end-of-line comments, sorry On Sun, Apr 24, 2011 at 9:30 AM, Nicolas Thierry-Mieg nicolas.thierry-m...@imag.fr wrote: Alexander Farber wrote: Is there a way to add comments to the iptables file? A hash mark # does not seem to work. assuming you are talking

Re: [CentOS] Adding comments to /etc/sysconfig/iptables

2011-04-24 Thread Kai Schaetzl
Alexander Farber wrote on Sun, 24 Apr 2011 09:04:30 +0200: i.e. there is sudo service iptables save, but I've yet to discover its usefulness You can add rules on the fly and save them. For instance, I have a certain starter script with iptables rules and other filtering stuff grown over the