[plug] Firewall

[James Bromberger]

On Wed, Jun 26, 2002 at 09:09:00PM +0800, Jon L. Miller wrote:
> I want to restart our firewall without bringing down the server.  IS the
> best way to do this is by issuing firewall flush rules then restarting
> the firewall script?

Yep. Why not put all your firewalling rules into a script, and start the 
script with:
	iptables -t nat -F
	iptables -t filter -F


And then place your rules...

And end it with:
	iptables -t nat -L
	iptables -t filter -L


Make sure you have the firewalling modules loaded that you expect. If you 
want normal FTP to work, load up the ip_conntract_ftp module... and make sure 
you add that to /etc/modules if you want it to work next time your reboot!

  James
-- 
 James Bromberger <james_AT_rcpt.to> www.james.rcpt.to
 Remainder moved to http://www.james.rcpt.to/james/sig.html
 The Australian Linux Technical Conference 2003: http://www.linux.conf.au/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20020626/58e3a653/attachment.pgp>