@Michael I assume you are templating the /etc/sysconfig/iptables in CentOS,
and /etc/iptables/rules.v4 in Ubuntu files? I just figured out that you can
install the iptables-persistent package in Ubuntu, I hadn't been sure what
files you were referring to before that...

So, a reload on CentOS would be ```service iptables restart```. What about
Ubuntu? ```cat /etc/iptables/rules.v4 | iptables-restore``` ?

@Brian, I took a look at fwbuilder. Looks almost as complicated as iptables
itself. At least for my limited needs. Maybe if I was doing something more
complicated... Thanks for the tip.

--David Reagan

On Thu, Dec 11, 2014 at 7:41 PM, Brian Coca <bc...@ansible.com> wrote:
>
> if you need a GUI, firewall builder http://www.fwbuilder.org/  is a
> desktop app that can generate iptables rules (among others), you can
> use it to get the commands for your templates.
>
> Though iptables is not hard the syntax can get clunky, the new linux
> fireall system, nftables, is much nicer and with clearer sytnax, it
> seems to borrow some good things from BSD's pf (packet filter). It
> might not be available to you yet.
>
>
> --
> Brian Coca
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Ansible Project" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/ansible-project/rkavS1H6AtA/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/CAJ5XC8mfFZJF-YJZBxfbJPnLhTAw%3DSVATJegQ8wwnsd16D%2BFTA%40mail.gmail.com
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANo%2B_AeQmV-4Pmb_Pvhn7CtUZoyzhMXPpHYRYhNKJVMc%3D805Bg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to