I do it with a custom rpm, then I can supersede the story later with a very small rpm update and not need to kickstart everything again. -- ---------- Vince.Skahan@xxxxxxxxxx --------- Connexion by Boeing - Cabin Network -----Original Message----- From: Mark Leary [mailto:mleary@xxxxxxxxxxxxxxxxx] Sent: Thursday, March 13, 2003 7:20 AM To: kickstart-list@xxxxxxxxxx Subject: RE: iptables and kickstart I think the easiest way to do this is just to configure /etc/sysconfig/iptables the way you want, and then just drop it in during %post: [....snip...] -----Original Message----- From: kickstart-list-admin@xxxxxxxxxx [mailto:kickstart-list-admin@xxxxxxxxxx] On Behalf Of Scott Melnyk Sent: Thursday, March 13, 2003 7:10 AM To: kickstart-list@xxxxxxxxxx Subject: iptables and kickstart Hello, I would like to add new default iptables to my kickstart machines that allow all connections within our subnet and drop everything else. [...snip...]