Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-31 Thread Jarry
Maybe a cron job that no matter what reloads the old rules 1 hour later? Wouldn't at make more sense? Thanks to all who replied. So first I saved my working rules with # /sbin/iptables-save -c > /root/ipt.bak Then I created my command file: # echo '#!/bin/bash' > /root/ipt-restore # echo '/sbi

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-25 Thread Mick
On Tuesday 25 January 2011 10:25:32 Neil Bothwick wrote: > On Mon, 24 Jan 2011 14:16:15 -0800, Mark Knecht wrote: > > Actually, upon 15 seconds of reflection, what happens if he's locked > > out and there's a power failure before the at command executes? When > > rebooted I think it won't be there

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-25 Thread Neil Bothwick
On Mon, 24 Jan 2011 14:16:15 -0800, Mark Knecht wrote: > Actually, upon 15 seconds of reflection, what happens if he's locked > out and there's a power failure before the at command executes? When > rebooted I think it won't be there anymore, will it? It will. -- Neil Bothwick DCE seeks DTE f

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-25 Thread Neil Bothwick
On Tue, 25 Jan 2011 00:28:32 +0200, Alan McKinnon wrote: > Maybe I'm just paranoid, or maybe I just screwed up myself too many > times, but I'd feel safer with cron for this. Cancelling it when done > is equally easy whether cron or at But to cancel the cron job, you'd have to edit crontab, then

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Alan McKinnon
Apparently, though unproven, at 23:40 on Monday 24 January 2011, J. Roeleveld did opine thusly: > On Monday 24 January 2011 19:47:43 Jarry wrote: > > Hi, > > > > I have to change rather complex iptables rules on server > > and I do not want to lock me out as this server is about > > 50 miles awa

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Alan McKinnon
Apparently, though unproven, at 00:14 on Tuesday 25 January 2011, Mark Knecht did opine thusly: > On Mon, Jan 24, 2011 at 1:50 PM, Neil Bothwick wrote: > > On Mon, 24 Jan 2011 10:59:16 -0800, Mark Knecht wrote: > >> Maybe a cron job that no matter what reloads the old rules 1 hour later? > > >

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Alex Schuster
Neil Bothwick writes: > On Mon, 24 Jan 2011 10:59:16 -0800, Mark Knecht wrote: > >> Maybe a cron job that no matter what reloads the old rules 1 hour later? > > Wouldn't at make more sense? You don't want the thing to keep reloading > your old config, at will do it once, and you can remove the t

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Mark Knecht
On Mon, Jan 24, 2011 at 2:14 PM, Mark Knecht wrote: > On Mon, Jan 24, 2011 at 1:50 PM, Neil Bothwick wrote: >> On Mon, 24 Jan 2011 10:59:16 -0800, Mark Knecht wrote: >> >>> Maybe a cron job that no matter what reloads the old rules 1 hour later? >> >> Wouldn't at make more sense? You don't want t

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Mark Knecht
On Mon, Jan 24, 2011 at 1:50 PM, Neil Bothwick wrote: > On Mon, 24 Jan 2011 10:59:16 -0800, Mark Knecht wrote: > >> Maybe a cron job that no matter what reloads the old rules 1 hour later? > > Wouldn't at make more sense? You don't want the thing to keep reloading > your old config, at will do it

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Neil Bothwick
On Mon, 24 Jan 2011 10:59:16 -0800, Mark Knecht wrote: > Maybe a cron job that no matter what reloads the old rules 1 hour later? Wouldn't at make more sense? You don't want the thing to keep reloading your old config, at will do it once, and you can remove the task from the at queue once you suc

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread J. Roeleveld
On Monday 24 January 2011 19:47:43 Jarry wrote: > Hi, > > I have to change rather complex iptables rules on server > and I do not want to lock me out as this server is about > 50 miles away. So how should I do it? > > I can back up the old rules by running: > /etc/init.d/iptables save > and it wi

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Manuel Klemenz
On Monday 24 January 2011 19:59:16 Mark Knecht wrote: > On Mon, Jan 24, 2011 at 10:47 AM, Jarry wrote: > > Hi, > > > > I have to change rather complex iptables rules on server > > and I do not want to lock me out as this server is about > > 50 miles away. So how should I do it? > > > > I can bac

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Mark Knecht
On Mon, Jan 24, 2011 at 11:06 AM, kashani wrote: > On 1/24/2011 10:59 AM, Mark Knecht wrote: >> >> On Mon, Jan 24, 2011 at 10:47 AM, Jarry  wrote: >>> >>> Hi, >>> >>> I have to change rather complex iptables rules on server >>> and I do not want to lock me out as this server is about >>> 50 miles

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread kashani
On 1/24/2011 10:59 AM, Mark Knecht wrote: On Mon, Jan 24, 2011 at 10:47 AM, Jarry wrote: Hi, I have to change rather complex iptables rules on server and I do not want to lock me out as this server is about 50 miles away. So how should I do it? I can back up the old rules by running: /etc/ini

Re: [gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Mark Knecht
On Mon, Jan 24, 2011 at 10:47 AM, Jarry wrote: > Hi, > > I have to change rather complex iptables rules on server > and I do not want to lock me out as this server is about > 50 miles away. So how should I do it? > > I can back up the old rules by running: > /etc/init.d/iptables save > and it will

[gentoo-user] modifying iptables: how can I prevent locking me out?

2011-01-24 Thread Jarry
Hi, I have to change rather complex iptables rules on server and I do not want to lock me out as this server is about 50 miles away. So how should I do it? I can back up the old rules by running: /etc/init.d/iptables save and it will be saved to /var/lib/iptables/rules-save (some strange format