Am 15.02.2013 04:23, schrieb Patrick O'Callaghan: > On Thu, 2013-02-14 at 13:39 -0500, Neal Becker wrote: >> I have a new f18 install. I see it has >> rpm -q firewall-config >> firewall-config-0.2.12-2.fc18.noarch >> >> But my older system that I updated from f17 does not have this, it >> is using the older firewall config (which I manually configured). >> >> Should I bother to install firewall-config on my older system? Does >> it offer some advantage? >> > > The old firewall configuration tool would reload the entire set of > kernel rules when you made a change. This could cause side-effects such > as dropping open connections. The new firewalld system avoids this where > possible. In fact I'm not even sure of the effect of mixing the two; if > you're using firewalld then use firewall-config to configure it. and firewall scripts using iptables.service provide the same as firewalld since decades: change the whole iptables policy without unload any kernel-module machines witout the GUI crap installed are left with iptables.service due a yum-dist-upgrade to F18, doe snot get installed firewalld at all and "iptables.service" in F18 is even a native systemd-unit _____________________________ iptables.sh iptables -P INPUT DROP iptables -P FORWARD DROP iptables -F iptables -X CHAINS=`cat /proc/net/ip_tables_names 2>/dev/null` for i in $CHAINS; do iptables -t $i -F; done && echo "Flush OK" || echo "Flush FAILED" for i in $CHAINS; do iptables -t $i -X; done && echo "Clear OK" || echo "Clear FAILED" for i in $CHAINS; do iptables -t $i -Z; done <iptables-rules to open needed ports after that> <iptables-rules for routing> <iptables-rules for NAT> _____________________________ terminal: iptables.sh you are done working fine since years on dozens of machines and yes i also came from windows and started to write my iptables.sh from my first linux day which is maintained since this day and adopted to runs on a large number of workstations as also servers/routers mostly of them in production environments
Attachment:
signature.asc
Description: OpenPGP digital signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
