PDA

Click to See Complete Forum and Search --> : iptables in rc.d

mychl
10-05-2001, 08:37 PM
I have an iptables script, but I'm not sure how to start it. I tried making S23iptables and K23iptables symlinks in rc2.d, rc3.d, and rc5.d.

The script will call all the modules that I need for iptables, I didn't get any errors during boot up, but lsmod didn't list any of the modules that I wanted to load.

I'm running suse 7.1, kernel 2.4.2. I had an ipchains firewall working nicely, but I want to upgrade to iptables.

I didn't rmmod ipchains, but that is loaded at bootup, and I disables that.

I don't think I need to recompile my kernel, the modules should be loadable as is.

ANy ideas???

TIA
Craig McPherson
10-05-2001, 09:41 PM
Originally posted by mychl:
<STRONG>I have an iptables script, but I'm not sure how to start it. I tried making S23iptables and K23iptables symlinks in rc2.d, rc3.d, and rc5.d.</STRONG>

Why?

You should have a symlink starting with a "S" if you do want the script run during startup, and a symlink starting with a "K" if you don't want the script run during startup. If you have two symlinks to the same script, one starting with an S and the other with a K, I have no idea what would happen.

And why are you creating symlinks in three different init directories? You only need one -- the one for the runlevel that you actually boot into, unless you use multiple runlevels on a regular basis.

The script will call all the modules that I need for iptables, I didn't get any errors during boot up, but lsmod didn't list any of the modules that I wanted to load.

Did you run the script manually first, from the command line, to make sure it works? Did it? If it didn't, why not? Was it not executable? Did you have an error somewhere in it?

[ 05 October 2001: Message edited by: Craig McPherson ]
singlespeed
10-10-2001, 03:20 PM
You HAVE to REMOVE ipchains. Whether it's disabled or not, the kernel will not load IPTABLES if IPCHAINS is installed......

"This kernel ain't big enough for the both of them...."

My IPTABLES post (http://www.linuxnewbie.org/cgi-bin/ubbcgi/ultimatebb.cgi?ubb=get_topic&f=13&t=005115) :D

Good luck