Re: iptables corrupt?

From: Christopher Kerr (gingekerr_at_gmail.com)
Date: 09/23/05 

Date: Thu, 22 Sep 2005 23:00:44 +0100

Bjoeboo wrote:

> ok I guess that makes sense.
> I assume 'iptables-restore' loads rules into kernel space whereas
> iptables-save saves whats in kernel space to a ruleset file?
>
> My problem is (besides not grasping the workings of iptables) is WHY
> when I reboot the machine it comes up with thie same funky ruleset?
> But if I 'iptables -F', then do 'service iptables restart' it begins
> using the correct ruleset? Where is it finding the funky ruleset? How
> do I make the good ruleset at /etc/sysconfig/iptables stick? Even after
> boot? ARGGH

The saved ruleset is by default in /var/lib/ip[6]tables/rules-save

you can turn on and off automatically loading and saving your rules
in /etc/conf.d/ip[6]tables