Re: Firewall will not disable - stumped!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



this is very strange....

I ran your flush command.. worked untill reboot

I  came across this article
http://www.thegeekstuff.com/2011/01/redhat-iptables-flush/

Basically tell me  how to save a wide open rules file - I did this and
behaved like the doc describes

This is what I have now

OPGX280 ~ :( # cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.7 on Sun Jul  7 09:14:11 2013
*filter
:INPUT ACCEPT [32:4712]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [40:5160]
COMMIT
# Completed on Sun Jul  7 09:14:11 2013

- until I reboot then I get the same jibberish...

OPGX280 ~ # /etc/rc.d/init.d/iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination
1    MASQUERADE  tcp  --  192.168.122.0/24    !192.168.122.0/24    masq
ports: 1024-65535
2    MASQUERADE  udp  --  192.168.122.0/24    !192.168.122.0/24    masq
ports: 1024-65535
3    MASQUERADE  all  --  192.168.122.0/24    !192.168.122.0/24

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Table: mangle
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination
1    CHECKSUM   udp  --  0.0.0.0/0            0.0.0.0/0           udp
dpt:68 CHECKSUM fill

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:53
2    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:53
3    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:67
4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:67

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            192.168.122.0/24    state
RELATED,ESTABLISHED
2    ACCEPT     all  --  192.168.122.0/24     0.0.0.0/0
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
4    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-port-unreachable
5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

I don't understand what or why  iptables is being called?

 I believe anything in /etc/rc.d/init.d/* will get run on startup. If I
move those files out of there - obviously the command wont work - but I
need to understand whats going on


I want status to tell me OFF

 /etc/rc.d/init.d/iptables status





On Sun, Jul 7, 2013 at 9:02 AM, Earl A Ramirez <earlaramirez@xxxxxxxxx>wrote:

> On 7 July 2013 20:57, Bob Metelsky <bob.metelsky@xxxxxxxxx> wrote:
>
> > very perplexed here - I need to turn off iptables. Ive tried
> >
> > service iptables save
> > service iptables stop
> > chkconfig iptables off
> >
> > service ip6tables save
> > service ip6tables stop
> > chkconfig ip6tables off
> >
> > edited
> > OPGX280 ~ # cat  /etc/sysconfig/system-config-firewall
> > # Configuration file for system-config-firewall
> > --disabled
> > --service=ssh
> >
> > OPGX280 ~ :( # cat  /etc/selinux/config
> > SELINUX=disabled
> >
> > OPGX280 ~ :( # chkconfig |grep ip
> > ip6tables       0:off   1:off   2:off   3:off   4:off   5:off   6:off
> > ipmievd         0:off   1:off   2:off   3:off   4:off   5:off   6:off
> > ipsec           0:off   1:off   2:off   3:off   4:off   5:off   6:off
> > iptables        0:off   1:off   2:off   3:off   4:off   5:off   6:off
> > ipvsadm         0:off   1:off   2:off   3:off   4:off   5:off   6:off
> >
> >
> > Yet - when I reboot  iptables gets started  - if I run
> >
> > OPGX280 ~ # /etc/rc.d/init.d/iptables status
> > Table: filter
> > Chain INPUT (policy ACCEPT)
> > num  target     prot opt source               destination
> > 1    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
> > dpt:53
> > 2    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
> > dpt:53
> > 3    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
> > dpt:67
> > 4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
> > dpt:67
> >
> > Chain FORWARD (policy ACCEPT)
> > num  target     prot opt source               destination
> > 1    ACCEPT     all  --  0.0.0.0/0            192.168.122.0/24    state
> > RELATED,ESTABLISHED
> > 2    ACCEPT     all  --  192.168.122.0/24     0.0.0.0/0
> > 3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> > 4    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
> > reject-with icmp-port-unreachable
> > 5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
> > reject-with icmp-port-unreachable
> >
> >
> > Note -->  192.168.122.0/24 is NOT my network, I just want the status to
> > tell me iptables is NOT running
> >
> > What else can I look for??
> >
> > Thanks
> > Bob
> > _______________________________________________
> > CentOS mailing list
> > CentOS@xxxxxxxxxx
> > http://lists.centos.org/mailman/listinfo/centos
> >
>
> Hi Bob,
>
> I am just shooting in the dark here, have you tried /sbin/iptables -F
>
> --
> Kind Regards
> Earl Ramirez
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos



[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux