Firewall rules

[rmvg]

I have followed the brief instructions on how to setup a iptables (my first attemt at iptabes i always used ipf) on the wiki when i run a /sbin/service iptables status i just get every line as an error is something wrong with the instructions on the wiki ?? or is this just my lack of experience with iptables??

Firewall Configuration - ZimbraWiki

[jholder]

What's the error?

[rmvg]

Originally Posted by jholder

What's the error?

/sbin/service iptables status
/etc/sysconfig/iptables-config: line 58: -A: command not found
/etc/sysconfig/iptables-config: line 59: -A: command not found
/etc/sysconfig/iptables-config: line 60: -A: command not found
/etc/sysconfig/iptables-config: line 61: -A: command not found
/etc/sysconfig/iptables-config: line 62: -A: command not found
/etc/sysconfig/iptables-config: line 64: -A: command not found
/etc/sysconfig/iptables-config: line 65: -A: command not found
/etc/sysconfig/iptables-config: line 67: -A: command not found
/etc/sysconfig/iptables-config: line 68: -A: command not found
/etc/sysconfig/iptables-config: line 69: -A: command not found
/etc/sysconfig/iptables-config: line 70: -A: command not found
/etc/sysconfig/iptables-config: line 71: -A: command not found
/etc/sysconfig/iptables-config: line 72: -A: command not found
/etc/sysconfig/iptables-config: line 73: -A: command not found
/etc/sysconfig/iptables-config: line 74: -A: command not found
/etc/sysconfig/iptables-config: line 75: -A: command not found
/etc/sysconfig/iptables-config: line 77: -A: command not found
/etc/sysconfig/iptables-config: line 78: -A: command not found
/etc/sysconfig/iptables-config: line 79: -A: command not found
/etc/sysconfig/iptables-config: line 80: -A: command not found
/etc/sysconfig/iptables-config: line 81: -A: command not found
/etc/sysconfig/iptables-config: line 82: -A: command not found
/etc/sysconfig/iptables-config: line 83: -A: command not found
/etc/sysconfig/iptables-config: line 84: -A: command not found
/etc/sysconfig/iptables-config: line 85: -A: command not found
/etc/sysconfig/iptables-config: line 86: -A: command not found
/etc/sysconfig/iptables-config: line 87: -A: command not found
/etc/sysconfig/iptables-config: line 89: -A: command not found
/etc/sysconfig/iptables-config: line 90: COMMIT: command not found

[phoenix]

Are you actually running this as root?

[rmvg]

yes i am running this as root is that bad?

[phoenix]

Originally Posted by rmvg

yes i am running this as root is that bad?

No, that's what you should be doing. That error usually arises because it's not run as root or you haven't done an 'su - root' - do you have the hypen in there when you su?

[imarks001]

Do you get the same results if you run "/sbin/iptables -nL"?

[rmvg]

nope i get this

/sbin/iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

then this
[root@canmail zcs]# /sbin/service iptables status
/etc/sysconfig/iptables-config: line 58: -A: command not found
/etc/sysconfig/iptables-config: line 59: -A: command not found
/etc/sysconfig/iptables-config: line 60: -A: command not found
/etc/sysconfig/iptables-config: line 61: -A: command not found
/etc/sysconfig/iptables-config: line 62: -A: command not found
/etc/sysconfig/iptables-config: line 64: -A: command not found
/etc/sysconfig/iptables-config: line 65: -A: command not found
/etc/sysconfig/iptables-config: line 67: -A: command not found
/etc/sysconfig/iptables-config: line 68: -A: command not found
/etc/sysconfig/iptables-config: line 69: -A: command not found
/etc/sysconfig/iptables-config: line 70: -A: command not found
/etc/sysconfig/iptables-config: line 71: -A: command not found
/etc/sysconfig/iptables-config: line 72: -A: command not found
/etc/sysconfig/iptables-config: line 73: -A: command not found
/etc/sysconfig/iptables-config: line 74: -A: command not found
/etc/sysconfig/iptables-config: line 75: -A: command not found
/etc/sysconfig/iptables-config: line 77: -A: command not found
/etc/sysconfig/iptables-config: line 78: -A: command not found
/etc/sysconfig/iptables-config: line 79: -A: command not found
/etc/sysconfig/iptables-config: line 80: -A: command not found
/etc/sysconfig/iptables-config: line 81: -A: command not found
/etc/sysconfig/iptables-config: line 82: -A: command not found
/etc/sysconfig/iptables-config: line 83: -A: command not found
/etc/sysconfig/iptables-config: line 84: -A: command not found
/etc/sysconfig/iptables-config: line 85: -A: command not found
/etc/sysconfig/iptables-config: line 86: -A: command not found
/etc/sysconfig/iptables-config: line 87: -A: command not found
/etc/sysconfig/iptables-config: line 89: -A: command not found
/etc/sysconfig/iptables-config: line 90: COMMIT: command not found
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination

Chain FORWARD (policy ACCEPT)
num target prot opt source destination

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

then this when check the status again

[root@canmail zcs]# /sbin/service iptables status
/etc/sysconfig/iptables-config: line 58: -A: command not found
/etc/sysconfig/iptables-config: line 59: -A: command not found
/etc/sysconfig/iptables-config: line 60: -A: command not found
/etc/sysconfig/iptables-config: line 61: -A: command not found
/etc/sysconfig/iptables-config: line 62: -A: command not found
/etc/sysconfig/iptables-config: line 64: -A: command not found
/etc/sysconfig/iptables-config: line 65: -A: command not found
/etc/sysconfig/iptables-config: line 67: -A: command not found
/etc/sysconfig/iptables-config: line 68: -A: command not found
/etc/sysconfig/iptables-config: line 69: -A: command not found
/etc/sysconfig/iptables-config: line 70: -A: command not found
/etc/sysconfig/iptables-config: line 71: -A: command not found
/etc/sysconfig/iptables-config: line 72: -A: command not found
/etc/sysconfig/iptables-config: line 73: -A: command not found
/etc/sysconfig/iptables-config: line 74: -A: command not found
/etc/sysconfig/iptables-config: line 75: -A: command not found
/etc/sysconfig/iptables-config: line 77: -A: command not found
/etc/sysconfig/iptables-config: line 78: -A: command not found
/etc/sysconfig/iptables-config: line 79: -A: command not found
/etc/sysconfig/iptables-config: line 80: -A: command not found
/etc/sysconfig/iptables-config: line 81: -A: command not found
/etc/sysconfig/iptables-config: line 82: -A: command not found
/etc/sysconfig/iptables-config: line 83: -A: command not found
/etc/sysconfig/iptables-config: line 84: -A: command not found
/etc/sysconfig/iptables-config: line 85: -A: command not found
/etc/sysconfig/iptables-config: line 86: -A: command not found
/etc/sysconfig/iptables-config: line 87: -A: command not found
/etc/sysconfig/iptables-config: line 89: -A: command not found
/etc/sysconfig/iptables-config: line 90: COMMIT: command not found
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination

Chain FORWARD (policy ACCEPT)
num target prot opt source destination

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

[phoenix]

You shouldn't need to run that command with '/sbin/' in the path, if you do you're not running as root. What happens if you leave the path off that command?

[rmvg]

sbin is not in my path

# service iptables status
bash: service: command not found
[root@canmail imapscripts]#