On Wed Feb 05 2003 at 09:52, "Andrew M. Williams" wrote: > I added entries to that file during %post, they disappeared on reboot. Disappeared??? Or not enabled at bootup? It should be trivial to drop a working /etc/sysconfig/iptables file into a newly built box, why would it "disappear"? In %post do a chroot into the new system, run /sbin/chkconfig to turn off ipchains and turn on iptables, and perhaps put "alias ipchains off" into /etc/modules.conf to make sure that ipchains doesn't get in the way. > - andrew > Eric Griffis wrote: > > Tuesday, February 4, 2003, 11:29:27 AM, Andrew wrote: > >>Is there a sane way to add iptables rules in the %post section > > Look at /etc/sysconfig/iptables on any redhat box. It's a pretty > > straight-forward text file, except for the [..,..] numbers at the > > beginning of certain lines. Anybody know what those numbers represent? > > I've set them to 0's in the past without noticeable side effects. > > > > ...eric Cheers Tony