Changes between Version 8 and Version 9 of sysadminiptables


Ignore:
Timestamp:
Jun 22, 2009, 12:46:37 PM (13 years ago)
Author:
risard
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • sysadminiptables

    v8 v9  
    8686||-j ACCEPT||if a packet matches the rules above, then "jump" to the ACCEPT command, in other words, accept the packet.||
    8787
    88 If you ran the above command, it would immediately add a rule to the iptables
     88If you ran the above command, it would immediately add a rule to the iptables INPUT chain.  If you ran iptalbes -L, you'd see your new rule in the list.
     89
     90Although the above looks complicated, it should be noted that the only parts you should ever be changing are the -s, -d and --dport options.  If you feel the need to change anything else, you should ask your fellow Evergreen Admins about it first!
     91
     92Once you've edited the rules to your liking, you need to save them to a file.  You do this with the following command:
     93{{{
     94    sudo iptables-save > /<path>/<firewall_file>
     95}}}
     96
     97This will save your changes to the file listed on the right. 
     98
     99=== Editing the file ===
     100
     101We keep our iptables rules in a configuration file.  For the name and location, ask your fellow Evergreen admins.  When you open the file, it simply looks like a list of iptable commands, just like the ones you'd type at the command line.  You can open the file with:
     102{{{
     103    sudo vim firewall_file
     104}}}
     105
     106Once opened, you can just add a line to the file and save it.  It's important to remember that the
     107
     108