Re: [CentOS] iptables default configuration

2010-01-19 Thread Ron Loftin
On Tue, 2010-01-19 at 14:32 -0600, Carlos Santana wrote: > On Tue, Jan 19, 2010 at 1:31 PM, Kai Schaetzl wrote: > > Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: > > > >> 'But it's harder to maintain as a > >> script of your own.'. You are also using script, right? > > > > The "as" is

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 1:31 PM, Kai Schaetzl wrote: > Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: > >> 'But it's harder to maintain as a >> script of your own.'. You are also using script, right? > > The "as" is ambiguous in this case ;-) Read: > But it's (adding on the fly, no scrip

Re: [CentOS] iptables default configuration

2010-01-19 Thread Kai Schaetzl
Carlos Santana wrote on Tue, 19 Jan 2010 08:51:19 -0600: > 'But it's harder to maintain as a > script of your own.'. You are also using script, right? The "as" is ambiguous in this case ;-) Read: But it's (adding on the fly, no script) harder to maintain as if you use a script of your own. Kai

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 7:31 AM, Kai Schaetzl wrote: > Carlos Santana wrote on Mon, 18 Jan 2010 17:54:51 -0600: > >> - The wiki page approach is to flush existing rules and then add >> required rules to iptables. Is it possible to add/append required >> rules without flushing existing set of rules

Re: [CentOS] iptables default configuration

2010-01-19 Thread Carlos Santana
On Tue, Jan 19, 2010 at 1:01 AM, Ian Blackwell wrote: > Rob Kampen wrote: >> Carlos Santana wrote: >>> - What does 'RH-Firewall-1-INPUT' chain means? This also seems to be a >>> predefined chain, although not mentioned in wiki. >>> - The wiki page approach is to flush existing rules and then add >

Re: [CentOS] iptables default configuration

2010-01-19 Thread Kai Schaetzl
Carlos Santana wrote on Mon, 18 Jan 2010 17:54:51 -0600: > - The wiki page approach is to flush existing rules and then add > required rules to iptables. Is it possible to add/append required > rules without flushing existing set of rules You can add rules on-the-fly at runtime and then use servi

Re: [CentOS] iptables default configuration

2010-01-18 Thread Ian Blackwell
Rob Kampen wrote: > Carlos Santana wrote: >> - What does 'RH-Firewall-1-INPUT' chain means? This also seems to be a >> predefined chain, although not mentioned in wiki. >> - The wiki page approach is to flush existing rules and then add >> required rules to iptables. Is it possible to add/append re

Re: [CentOS] iptables default configuration

2010-01-18 Thread Rob Kampen
Carlos Santana wrote: Hi, I would like to get some inputs on how to configure iptables. I have referred to CentOS wiki http://wiki.centos.org/HowTos/Network/IPTables and it has been very helpful. I have configured iptables with the help of this tutorial, but I haven't understood few things about

[CentOS] iptables default configuration

2010-01-18 Thread Carlos Santana
Hi, I would like to get some inputs on how to configure iptables. I have referred to CentOS wiki http://wiki.centos.org/HowTos/Network/IPTables and it has been very helpful. I have configured iptables with the help of this tutorial, but I haven't understood few things about default firewall config