Firewall rules

[phoenix]

Then I'll go back to my earlier question, are you doing 'su - root' with the hyphen? - that sets the environment correctly. You shouldn't need to specify /sbin/iptables as /sbin is in the path for root.

[rmvg]

Originally Posted by phoenix

Then I'll go back to my earlier question, are you doing 'su - root' with the hyphen? - that sets the environment correctly. You shouldn't need to specify /sbin/iptables as /sbin is in the path for root.

is su -root any different that regular root besides i want ip tables to start as service when i reboot my machine.

[root@canmail ~]# su - root
[root@canmail ~]# /sbin/ip
ip ip6tables-save iptables-restore
ip6tables ipmaddr iptables-save
ip6tables-restore iptables iptunnel
[root@canmail ~]# /sbin/iptables
iptables v1.3.5: no command specified
Try `iptables -h' or 'iptables --help' for more information.

[phoenix]

Originally Posted by rmvg

is su -root any different that regular root besides i want ip tables to start as service when i reboot my machine.

Yes, it is the hyphen '-' that ensures the correct environment is set for that user. It's exactly the same if you do 'su zimbra' rather than 'su - zimbra' - you'll get errors.

Do an 'su - root' then try the command you did earlier:

service iptables status

without the /sbin/ prefix. That should run OK and you should be able to make the changes you want.

[rmvg]

Am i missing something here? why is this being so difficult?

[root@canmail c0mputerking]# su - root
[root@canmail ~]# service iptables status
/etc/sysconfig/iptables-config: line 53: *filter: command not found
/etc/sysconfig/iptables-config: line 54: :INPUT: command not found
/etc/sysconfig/iptables-config: line 55: :FORWARD: command not found
/etc/sysconfig/iptables-config: line 56: :OUTPUT: command not found
/etc/sysconfig/iptables-config: line 57: :RH-Firewall-1-INPUT: command not found
/etc/sysconfig/iptables-config: line 58: -A: command not found
/etc/sysconfig/iptables-config: line 59: -A: command not found
/etc/sysconfig/iptables-config: line 60: -A: command not found
/etc/sysconfig/iptables-config: line 61: -A: command not found
/etc/sysconfig/iptables-config: line 62: -A: command not found
/etc/sysconfig/iptables-config: line 64: -A: command not found
/etc/sysconfig/iptables-config: line 65: -A: command not found
/etc/sysconfig/iptables-config: line 67: -A: command not found
/etc/sysconfig/iptables-config: line 68: -A: command not found
/etc/sysconfig/iptables-config: line 69: -A: command not found
/etc/sysconfig/iptables-config: line 70: -A: command not found
/etc/sysconfig/iptables-config: line 71: -A: command not found
/etc/sysconfig/iptables-config: line 72: -A: command not found
/etc/sysconfig/iptables-config: line 73: -A: command not found
/etc/sysconfig/iptables-config: line 74: -A: command not found
/etc/sysconfig/iptables-config: line 75: -A: command not found
/etc/sysconfig/iptables-config: line 77: -A: command not found
/etc/sysconfig/iptables-config: line 78: -A: command not found
/etc/sysconfig/iptables-config: line 79: -A: command not found
/etc/sysconfig/iptables-config: line 80: -A: command not found
/etc/sysconfig/iptables-config: line 81: -A: command not found
/etc/sysconfig/iptables-config: line 82: -A: command not found
/etc/sysconfig/iptables-config: line 83: -A: command not found
/etc/sysconfig/iptables-config: line 84: -A: command not found
/etc/sysconfig/iptables-config: line 85: -A: command not found
/etc/sysconfig/iptables-config: line 86: -A: command not found
/etc/sysconfig/iptables-config: line 87: -A: command not found
/etc/sysconfig/iptables-config: line 89: -A: command not found
/etc/sysconfig/iptables-config: line 90: COMMIT: command not found
Firewall is stopped.

Originally Posted by phoenix

Yes, it is the hyphen '-' is what ensures the correct environment is set for that user. It's exactly the same if you do 'su zimbra' rather than 'su - zimbra' - you'll get errors.

Do an 'su - root' then try the command you did earlier:

service iptables status

without the /sbin/ prefix. That should run OK and you should be able to make the changes you want.

[mmorse]

Can you uninstall/reinstall the firewall service/package?

[stlscott]

Just a side additional note.... I followed the instructions as well on my box and got the same errors, both with and without the - root. Also, got the same errors if I just logged in locally as root.

Since I had other problems to resolve, I just turned off Iptables and set that project aside for another day.

Since I got the same errors, I thought maybe the instructions may not be correct for RHEL5 (which is what CentOS 5 is).

Thanks
Scott

[imarks001]

It looks like you got your files mixed up. You edited /etc/sysconfig/iptables-config instead of /etc/sysconfig/iptables.